Re:Massachusetts Steamship Authority hit by ransomware attac...
by WalterBright on Wednesday June 02, 2021 @07:49PM
(#27375430)
The odds of hitting the secondary are zero if you've got a hardware write enable switch!
One thing you could do is get one of those mechanical lamp timer clocks from the hardware store, and have it turn the power on/off the network card on schedule.
Re:Massachusetts Steamship Authority hit by ransomware attac...
by mjevans on Thursday June 03, 2021 @02:36AM
(#27377890)
I am now seeing a grandma style light timer device used to turn off and on a cheep switch.
Re:Massachusetts Steamship Authority hit by ransomware attac...
by WalterBright on Thursday June 03, 2021 @05:30AM
(#27378883)
Oh you could find an expensive way to do it, but the idea is the same.
Backups get pushed from devices between 1AM and 3AM each day, so the primary backup server enables it's network card at 1 and disables it at 3.
Primary backup server also has a second network card, that in turn is attached to a small subnet containing it and the secondary backup server only. The secondary backup server pulls a copy from the primary on a weekly basis in a similar manner as the primary, disabling it's network card once it has finished.
Maybe they can hit the primary if the infection takes place overnight, but the odds of getting the secondary are pretty low.