News for hackers. Stuff that matters.

A comment on Uber investigating breach of its computer systems. Parent comment

Re:Uber investigating breach of its computer systems by gnu8 on Thursday September 15, 2022 @10:22PM (#32861316)
A reasonably sophisticated attacker could arrange for the entire team to get SIM-swapped and suspended from Facebook when they launch an attack. If only there were some way to have a central rallying point for everyone to meet at. Perhaps some sort of a structure, with the company's name on it, and it would have places to sit inside, with computers connected to the company's infrastructure to use.
[ Parent | on HN ]
Re:Uber investigating breach of its computer systems by bombcar on Thursday September 15, 2022 @10:28PM (#32861360)
In the old days you’d have physical restrictions on access to the datacenter - in a major breach you’d get there physically and shut it down and disconnect it.

With everything cloud now, how do you recover your cloud account of the master got compromised?

[ Parent | on HN ]
Re:Uber investigating breach of its computer systems by zmgsabst on Thursday September 15, 2022 @11:25PM (#32861704)
For someone Uber’s size, you call your AWS rep and co-ordinate with AWS security.
[ Parent | on HN ]
Re:Uber investigating breach of its computer systems by mrsalt on Friday September 16, 2022 @03:37PM (#32870994)
Could the CTO or some other employee go to Amazon's office to do something like this? I genuinely wonder.
[ Parent | on HN ]
Re:Uber investigating breach of its computer systems by Griffinsauce on Friday September 16, 2022 @07:15AM (#32864604)
How do they verify your identity?
[ Parent | on HN ]
Re:Uber investigating breach of its computer systems by fjfbsufhdvfy on Thursday September 15, 2022 @10:42PM (#32861446)
That's the fun part, you don't!
[ Parent | on HN ]
Re:Uber investigating breach of its computer systems by CPLX on Thursday September 15, 2022 @10:42PM (#32861447)
Who controls the database of RFID cards allowed to open the doors?
[ Parent | on HN ]
Re:Uber investigating breach of its computer systems by bombcar on Thursday September 15, 2022 @11:13PM (#32861648)
Usually the datacenter was manned (sometimes by guys with guns) and they had various mechanisms for ID verifications.

And they had an entirely separate IT setup that wasn’t related to yours.

[ Parent | on HN ]
Re:Uber investigating breach of its computer systems by wumpus on Thursday September 15, 2022 @11:49PM (#32861829)
My not super-secure datacenter requires either a palm-print plus RFID card, or showing ID to a human.
[ Parent | on HN ]