News for hackers. Stuff that matters.
Re:US city rejects $5.3M ransom demand and restores encrypte... by beagle3 on Friday September 06, 2019 @02:21AM (#20893507)
Which sounds ridiculous to me - on Macs you have, available to all users with a reasonable GUI, TimeMachine which is basically hourly backup (though i don’t know if you can make old ones effectively immutable).

But if you know how to run a script (and hopefully anyone administering a 100 computer network does), at least on Linux / Mac, you could use bup or borg or a few others to have effective immutable hourly backups that take almost no space - we do that where I work. I’m sure there’s something similar for Windows.

Re:US city rejects $5.3M ransom demand and restores encrypte... by acd10j on Friday September 06, 2019 @02:59AM (#20893631)
In this case you can still lose hour worth of data. Multiply this with whole city/company scale. Paying a ransom for preventing this much effort going waste would still worth something.
Re:US city rejects $5.3M ransom demand and restores encrypte... by devcpp on Friday September 06, 2019 @04:20AM (#20893959)
Then these are incompetent people who forget to multiply the cost of the ransom by the amount of times it will likely repeat if they don't refuse to discuss with abductors.

It's like saying "why would we put this guy is jail? He's committed a crime but it's done now". Yeah, sure. Except without a deterrent he'll do it again tomorrow. This is the same except it gets rid if the motive instead.

Re:US city rejects $5.3M ransom demand and restores encrypte... by denkmoon on Friday September 06, 2019 @02:46AM (#20893590)
There are such products for Windows, it's even built in. It requires the sysadmin to set it up though, and therefore is non functional in 99% of deployments.
Re:US city rejects $5.3M ransom demand and restores encrypte... by beagle3 on Friday September 06, 2019 @06:42AM (#20894498)
Snapshots (not incremental nor differential) that take space proportional to change (1 byte change in a 5GB file takes 10K or so in backup, even insertion/deletion), built in to windows? How is it called?

TimeMachine in macs has a similar feature set notably lacking proportional space (insert 1 byte anywhere in a 5GB file and the snapshot takes an additional 5GB)

Re:US city rejects $5.3M ransom demand and restores encrypte... by denkmoon on Sunday September 08, 2019 @11:56PM (#20915110)
Can't say I'm sure about the actual space usage, but the subsystem is "Shadow Copy". https://en.wikipedia.org/wiki/Shadow_Copy
Re:US city rejects $5.3M ransom demand and restores encrypte... by beagle3 on Monday September 09, 2019 @01:30AM (#20915422)
That’s a low level mechanism that is used to implement consistent backups, (comparable to e.g. LVM snapshots for any file system or ZFS/Btrfs snapshots) but it does not offer anything directly to end users. The venerable built in NTBackup (afaik the only built in user backup system included in Windows) is better than nothing but is a far cry from Borg/Bup - it is practically infeasible to snapshot e.g. every hour.