News for hackers. Stuff that matters.

A comment on US city rejects $5.3M ransom demand and restores encrypted files from backup. Parent comment

Re:US city rejects $5.3M ransom demand and restores encrypte... by icebraining on Friday September 06, 2019 @03:31AM (#20893753)
What if someone uses the credentials to file a support request in that platform asking the snapshots to be deleted?
[ Parent | on HN ]
Re:US city rejects $5.3M ransom demand and restores encrypte... by jdnenej on Friday September 06, 2019 @04:12AM (#20893922)
Hopefully anyone with the ability to delete them would decline such a request.
[ Parent | on HN ]
Re:US city rejects $5.3M ransom demand and restores encrypte... by icebraining on Friday September 06, 2019 @05:04AM (#20894140)
So the platform would keep data against the wishes of the client? That doesn't sound good.
[ Parent | on HN ]
Re:US city rejects $5.3M ransom demand and restores encrypte... by afiori on Friday September 06, 2019 @05:20AM (#20894208)
A better interpretation is that there might be multiple channels used for different identification purposes (a la 2-factor authentication) and the provider can ask for confirmation in a higher security channel. Whether this is done/feasible in practice is debatable.
[ Parent | on HN ]
Re:US city rejects $5.3M ransom demand and restores encrypte... by TomMarius on Friday September 06, 2019 @05:20AM (#20894207)
More like it would include a more elaborate, person to person process.
[ Parent | on HN ]