News for hackers. Stuff that matters.
Re:Ukrainian hackers destroyed the IT infrastructure of Russ... by andrelaszlo on Wednesday July 16, 2025 @06:59AM (#44580819)
Just the other day one of my clients had a production critical server failing and we started restoring it from backups.

Turns out some of the software running on it had some weird licensing checks tied to the hardware so it refused to start on the new server.

It turns out that the company that made this important piece of software doesn't even exist anymore.

Re:Ukrainian hackers destroyed the IT infrastructure of Russ... by tialaramex on Wednesday July 16, 2025 @07:45AM (#44581131)
Virtualization really helps. We have a lot of weird software which requires hardware dongles, but they're all USB dongles and they're all virtualized, one of the DC racks has a few U worth of just USB socket -> dongle wired up so that if we spin up a VM it can say "Hey, give me a USB socket with a FooCorp OmniBloat dongle on it" and get one unless they're all used.
Re:Ukrainian hackers destroyed the IT infrastructure of Russ... by 2YwaZHXV on Wednesday July 16, 2025 @02:12PM (#44585252)
would certainly be interested to learn more about this
Re:Ukrainian hackers destroyed the IT infrastructure of Russ... by BrandoElFollito on Wednesday July 16, 2025 @08:06AM (#44581296)
This is a nightmare kind of discovery. I had a similar one, but fortunately, it wasn't as impactful.

This is why I like docker, if you keep the sources, you recover no matter what (at least until the "no matter what" holds water)

Re:Ukrainian hackers destroyed the IT infrastructure of Russ... by znpy on Wednesday July 16, 2025 @11:01AM (#44583078)
> This is why I like docker,

my understanding is that docker would not have helped in that scenario

Re:Ukrainian hackers destroyed the IT infrastructure of Russ... by BrandoElFollito on Wednesday July 16, 2025 @11:12AM (#44583176)
it really depends on the scenario but if the application was dockerized and they had an image, it would be just starting it again, somewhere else.

Possibly with the same network settings if the licensing check was based on that.

But of course it can easily go south, though testing the recovery of a container based off an image and mounted volume is simple and quickly shows you if it works or not.

But of course it may work today but not tomorrow because the software was not ready for Y2K and according to it we are in the XX century or something and the license is 156 years ... young. Cannot allow this nonsense to proceed, call us at <defunct number>

IT is full of joy and happiness

Re:Ukrainian hackers destroyed the IT infrastructure of Russ... by znpy on Wednesday July 16, 2025 @11:52AM (#44583654)
> it really depends on the scenario

yeah and that scenario was clear:

> Turns out some of the software running on it had some weird licensing checks tied to the hardware so it refused to start on the new server.

Re:Ukrainian hackers destroyed the IT infrastructure of Russ... by BrandoElFollito on Wednesday July 16, 2025 @11:57AM (#44583725)
"hardware" does not mean "bare metal". It could be a MAC, a serial number or similar things that may be linked to a generic or clonable value in virtualization.
Re:Ukrainian hackers destroyed the IT infrastructure of Russ... by znpy on Thursday July 17, 2025 @06:15AM (#44591630)
but docker isn't virtualization, you understand this, right ?
Re:Ukrainian hackers destroyed the IT infrastructure of Russ... by BrandoElFollito on Thursday July 17, 2025 @07:47AM (#44592246)
To some extent, yes -- having developed apps that were dockerized, and having managed virtualization systems (ESXi and similar), as well as docker engines.

I am not sure I see your point, though.

Re:Ukrainian hackers destroyed the IT infrastructure of Russ... by 15155 on Wednesday July 16, 2025 @11:54AM (#44583669)
> Turns out some of the software running on it had some weird licensing checks tied to the hardware so it refused to start on the new server.

This is around the time when you call that one guy on your team that can reverse engineer and patch out the license check.

Re:Ukrainian hackers destroyed the IT infrastructure of Russ... by aspenmayer on Wednesday July 16, 2025 @04:41PM (#44586581)
Interoperability exception might allow this in exigent circumstances when you do have a valid license, but I wouldn’t do this without running it by the software vendor whose license you are using. In a recovery situation, you’ll probably need to be on the phone a lot, so I can see how you might think it’s quicker to bypass the license check, but that is one person giving some or all of their attention just to that. Disaster recovery isn’t a one person job unless that one person was the whole team anyway, so I think this idea needs to be calibrated somewhat to expectations.