News for hackers. Stuff that matters.
Re:Major Swedish supermarket chain hit by cyberattack by l33tman on Saturday July 03, 2021 @09:52AM (#27721622)
The impact is that 20% of Sweden's food supply is locked out. This is larger than what it seems, not just for Swedish meatballs - the underlying Kaseya hack is global.

It's truly scary that you can get into these kinds of situations (completely relying on a 3rd party IT), but it's also very costly to have a doubled setup :/

Re:Major Swedish supermarket chain hit by cyberattack by typhonic on Saturday July 03, 2021 @12:21PM (#27722704)
Once, while working at a large grocery store, we lost power. The emergency lights came on, but all the cash registers stopped working. One of the managers ran to the back of the store and returned with hand cranks that fit into the side of the cash registers. It was darker, but sales did not stop. The time required to re-train the cashiers was negligible.

This cyber attack will probably result in a doubling down of the same technology that put them into this position. Perhaps, in addition, they should look for a lower tech fall back approach.

Re:Major Swedish supermarket chain hit by cyberattack by ethbr0 on Saturday July 03, 2021 @12:27PM (#27722749)
A key point is remembering the reason for computerization & automation is efficiency.

The difference between less (manual) & more (computerized) efficiency is probably less important than the difference between stopping & continuing operations, in exceptional times.

Waffle House and Home Depot (among others) are pretty good at internalizing this, and have processes for running on shoestrings, but still running, until normal support can be restored.

Re:Major Swedish supermarket chain hit by cyberattack by reader_mode on Saturday July 03, 2021 @12:37PM (#27722841)
How do you process cards with hand cranks ?

Also these days I think you're legally required to use some sort of government fiscalisation service where each receipt is uploaded as issued or something like that.

Re:Major Swedish supermarket chain hit by cyberattack by ratww on Saturday July 03, 2021 @02:34PM (#27723727)
There are small handheld readers for cards with chip/RFID + PIN. I've started seeing some being used here (EU) in such emergencies.

They're pretty cheap, I even have one myself.

Re:Major Swedish supermarket chain hit by cyberattack by yissp on Saturday July 03, 2021 @01:17PM (#27723149)
I've seen businesses in the US use these things during power outages. https://www.possupply.com/model-4850-flatbed-credit-card-imp...
Re:Major Swedish supermarket chain hit by cyberattack by ghaff on Saturday July 03, 2021 @01:20PM (#27723187)
Most of my cards aren't embossed at this point. They'd have to write the information by hand.
Re:Major Swedish supermarket chain hit by cyberattack by skinkestek on Saturday July 03, 2021 @01:12PM (#27723110)
In Norway the CEO(? I don't know his exact title) of the countrys national bank gas demanded that everyone keep supporting cash for the foreseeable future or face fines.

I find that to be a smart move.

Re:Major Swedish supermarket chain hit by cyberattack by kwhitefoot on Saturday July 03, 2021 @02:44PM (#27723801)
Not everyone is paying attention. I went past a shop in Tønsberg last week that had a sign saying that they do not accept cash. Quite a few buses here in Norway do not accept cash at the moment in order to reduce the driver's risk risk of catching COVID.
Re:Major Swedish supermarket chain hit by cyberattack by skinkestek on Saturday July 03, 2021 @06:17PM (#27725397)
I know. It will be interesting to see if he manage to continue his hard line after the pandemic.

I really hope so.

Re:Major Swedish supermarket chain hit by cyberattack by eitland on Saturday July 03, 2021 @06:48PM (#27725620)
Is it ok if I ask if you live near Tønsberg?

If not, just pretend you didn't see this message :-)

Re:Major Swedish supermarket chain hit by cyberattack by kwhitefoot on Tuesday July 06, 2021 @01:18PM (#27751520)
Of course, you may always ask anything. But I won't promise to always answer.

In this case the answer is that I live in Drammen.

May I ask why you want to know, and what you will do with this information?

Re:Major Swedish supermarket chain hit by cyberattack by eitland on Wednesday July 07, 2021 @10:39AM (#27761626)
> May I ask why you want to know, and what you will do with this information?

Sure. The reason I asked was that I just want to get a feeling for who all you folks are. Also since I live in Horten it would have been the closest one I knew except people at work.

As for what I want to do with the information I guess it depended on the answer, but probably nothing.

If there was a place to meet HNers near home or work I'd probably visit it once a year or something (depending on how it turned out the first time).

Re:Major Swedish supermarket chain hit by cyberattack by kwhitefoot on Friday July 09, 2021 @04:06AM (#27781473)
I wonder if there is a map showing where HNers are? Or if it would be possible to create one.
Re:Major Swedish supermarket chain hit by cyberattack by bjourne on Saturday July 03, 2021 @12:46PM (#27722918)
That wouldn't work as 98% of all Swedish customers pay with their debit and credit cards and don't have any cash on them.
Re:Major Swedish supermarket chain hit by cyberattack by brisad on Saturday July 03, 2021 @12:57PM (#27723005)
Well, perhaps they should just bring the cash then. I find it incredible naive to just do away with cash in society.
Re:Major Swedish supermarket chain hit by cyberattack by robin_reala on Saturday July 03, 2021 @01:28PM (#27723254)
It’s already effectively been done away with, and it would be a multi-year societal change to bring it back. I’ve been living in Sweden for four years, and I think that’s about the same number of times I’ve even seen a coin or note.
Re:Major Swedish supermarket chain hit by cyberattack by ghaff on Saturday July 03, 2021 @02:50PM (#27723831)
It's far more common in the US and I certainly see it on a regular basis. But, personally, I'll go months without using it and if I'm driving somewhere I'll have some cash in the car but don't usually carry it on my person.
Re:Major Swedish supermarket chain hit by cyberattack by AtNightWeCode on Saturday July 03, 2021 @02:48PM (#27723821)
That train has left the station a long time ago. In Sweden, debit cards are the most common payment method at stores. Most legit companies don't want cash. It just exposes a lot of people for the risk of being robbed.
Re:Major Swedish supermarket chain hit by cyberattack by peakaboo on Saturday July 03, 2021 @03:23PM (#27724061)
The official reason is that they want to control crime. The unofficial reason is that they want to be able to track everything people do with money.
Re:Major Swedish supermarket chain hit by cyberattack by peakaboo on Saturday July 03, 2021 @03:26PM (#27724085)
Forgot to add... They want to be able to make anyone unable to buy anything at the click of a button. Sweden is pretty much there already so now we are hoping the government doesn't turn into fascism because then we are completely unable to do anything. Keep your guns, America.
Re:Major Swedish supermarket chain hit by cyberattack by arkitaip on Saturday July 03, 2021 @03:35PM (#27724140)
Handling cash is expensive for stores. They need to store the cash safely in-store, deploys all kinds of security measures to prevent robberies and theft, use armored cars to transport to and from the bank, pay more in insurance, etc.
Re:Major Swedish supermarket chain hit by cyberattack by emj on Saturday July 03, 2021 @03:48PM (#27724274)
GDPR and other laws are supposed to stop that, and has worked out nicely according to audits. Stores are not allowed to keep your credit card number just a reference number. (But a lot of clubs are now registered on the credit card so they can still conncet a sale to a person with out storing the credit card number.)
Re:Major Swedish supermarket chain hit by cyberattack by aliswe on Saturday July 03, 2021 @06:07PM (#27725331)
"they" huh? and who gave you the unofficial reason btw?
Re:Major Swedish supermarket chain hit by cyberattack by AdrianB1 on Saturday July 03, 2021 @03:28PM (#27724107)
Is robbery that widespread in Sweden?
Re:Major Swedish supermarket chain hit by cyberattack by AtNightWeCode on Saturday July 03, 2021 @03:42PM (#27724208)
It was very common to rob money transfers back in the days. It kind of peaked around the big helicopter robbery +10 years ago. The use of cash has been on a decline for decades. The transports are never armed like in other countries. https://en.wikipedia.org/wiki/V%C3%A4stberga_helicopter_robb...
Re:Major Swedish supermarket chain hit by cyberattack by arkitaip on Saturday July 03, 2021 @03:36PM (#27724146)
It never was common but all the cash management and security measures quickly add up in terms of costs.
Re:Major Swedish supermarket chain hit by cyberattack by bjourne on Sunday July 04, 2021 @02:34AM (#27727676)
Why would they? They just go to a competing supermarket chain instead.
Re:Major Swedish supermarket chain hit by cyberattack by Scoundreller on Saturday July 03, 2021 @10:17AM (#27721766)
It’s less about doubled setups and more about downtime procedures that don’t have to be perfect but get you by to stay functioning at some level.
Re:Major Swedish supermarket chain hit by cyberattack by Taek on Saturday July 03, 2021 @11:36AM (#27722297)
Agreed, pretty much every physical operation (stores, logistics, etc) should have plans to continue operating when their IT is down. Losing access to dynamic pricing and loyalty discounts is better than closing up entirely.
Re:Major Swedish supermarket chain hit by cyberattack by miohtama on Saturday July 03, 2021 @12:26PM (#27722739)
This gets hard in no cash society, like what Sweden is already.
Re:Major Swedish supermarket chain hit by cyberattack by Scoundreller on Saturday July 03, 2021 @12:57PM (#27722997)
Any POS terminal should be able to work with power only. There’s probably a dusty manual somewhere telling you how to configure it for the store to enable it and allow the cashier to type in an amount owing and then hand to the customer and queue payments for upload when network connectivity comes back.

Might lose some payments to overdrafts or cancelled cards. But they lived with that with credit cards up until 2000ish.

Buy-on-board on Aircraft and trains take advantage of this.

Offline payments is baked into EMV payments. It can at least verify the PIN and that the card was valid at its last phone-home.

https://www.google.com/search?q=mastercard+emv+offline+payme...

Re:Major Swedish supermarket chain hit by cyberattack by haskellandchill on Saturday July 03, 2021 @12:29PM (#27722762)
with pen and paper books can be kept
Re:Major Swedish supermarket chain hit by cyberattack by miohtama on Saturday July 03, 2021 @12:50PM (#27722948)
But you cannot pay with a pen at a cash registry
Re:Major Swedish supermarket chain hit by cyberattack by haskellandchill on Monday July 05, 2021 @08:23PM (#27743103)
You can't, I can at certain registries in my town.
Re:Major Swedish supermarket chain hit by cyberattack by Scoundreller on Saturday July 03, 2021 @01:00PM (#27723025)
It’s a co-op store. They know who you are.
Re:Major Swedish supermarket chain hit by cyberattack by cpach on Saturday July 03, 2021 @01:10PM (#27723098)
It’s a co-op by name only. These days, Coop’s just a regular supermarket.
Re:Major Swedish supermarket chain hit by cyberattack by Scoundreller on Saturday July 03, 2021 @02:37PM (#27723747)
This should be illegal.
Re:Major Swedish supermarket chain hit by cyberattack by cjg_ on Saturday July 03, 2021 @02:48PM (#27723819)
Coop the store chain is owned by a cooperative association (https://en.wikipedia.org/wiki/Kooperativa_F%C3%B6rbundet) so would say it is legit still.
Re:Major Swedish supermarket chain hit by cyberattack by ghaff on Saturday July 03, 2021 @02:58PM (#27723893)
Why on earth should a member-owned structure be limited to some little store where everyone knows everyone? In the US some fairly large organizations, including juice makers Ocean Spray and outdoor chain REI, are co-ops.
Re:Major Swedish supermarket chain hit by cyberattack by detaro on Saturday July 03, 2021 @02:46PM (#27723809)
Just because the organization is a co-op (of co-ops in the case of the overall parent org) doesn't mean it knows all members of the public that go shopping there.
Re:Major Swedish supermarket chain hit by cyberattack by Scoundreller on Saturday July 03, 2021 @05:57PM (#27725260)
It doesn't mean they socially know everyone that shows up, but every member would have paid some amount to buy (a) share(s), at least that's how coops work where I am. Plus accumulated dividends. That's a relative barrier to fraud if they decided to issue credit to members.

You could still fraud hit them in this circumstance, but they have some kind of info printed on your card with your name on it and how long you've been a member, and somewhere in the background, a phone# and address.

If one wanted to commit retail crime, easier to just take stuff and walk out without paying.

Re:Major Swedish supermarket chain hit by cyberattack by detaro on Sunday July 04, 2021 @10:31AM (#27729881)
They are not limited to members of a participating co-op. Everyone can go shopping there.
Re:Major Swedish supermarket chain hit by cyberattack by logifail on Saturday July 03, 2021 @01:28PM (#27723258)
> [..] more about downtime procedures that don’t have to be perfect [..]

Once, while waiting to check in for a British Airways flight from Manchester (UK), I noticed several large plastic boxes behind the check-in counters labelled "manual check-in".

Presumably someone at BA not only thought about but actually implemented a plan for how to check in passengers when (not if) all the check-in computers go down.

Re:Major Swedish supermarket chain hit by cyberattack by deviledeggs on Saturday July 03, 2021 @01:56PM (#27723472)
Airlines are fairly immune to technical problems because their systems are so terrible already. Accidental chaos engineering
Re:Major Swedish supermarket chain hit by cyberattack by INTPenis on Saturday July 03, 2021 @01:56PM (#27723471)
Coop were handing out bread here today like some disaster movie. But ICA and several other stores are still open so I really don't take this too seriously.

This is a classic case of layered out sourcing as I'd like to call it, and no redundancy. They'll learn.

Re:Major Swedish supermarket chain hit by cyberattack by peakaboo on Saturday July 03, 2021 @03:21PM (#27724043)
That's overly dramatic. We just go to another company brand chain to shop. Plenty of those, so no worries, at least until all food shops run out of food... :)