|
Given all of the hype in the US about "Russian cyber-attacks", are any of you guys doing anything about it?
I have been thinking about encrypting my hard drives for this reason, and ransom attacks as well.
I wonder, however if the encryption-decryption process slows down disk I/O perceptibly? Have any of you guys done it, and what is your experience?
ed
|
|
|
|
|
I'm not doing anything other than the usual:
- Periodic backups of all systems
- All truly important data stored in multiple formats & locations (NAS, DVD/CD, home, work office, etc.)
Freedom is the freedom to say that two plus two make four. If that is granted, all else follows.
-- 6079 Smith W.
|
|
|
|
|
I am not sweating this in the slightest.
|
|
|
|
|
Nope. Not doing anything different.
The Russians didn't just start doing sketchy sh*t on the web a month ago. They've been doing this crap for quite a long time now.
|
|
|
|
|
Dont loose the passwords or you are hijacked by yourself 
Press F1 for help or google it.
Greetings from Germany
|
|
|
|
|
That's super simple. Redirect all requests coming from Russia to known servers of Nigerian princes, and vice versa. Throw in some spam of your own (free Vodka always gets their attention) and grab some popcorn.
I have lived with several Zen masters - all of them were cats.
His last invention was an evil Lasagna. It didn't kill anyone, and it actually tasted pretty good.
|
|
|
|
|
Not directly because of russian cyber attacks, but the attacks are growing exponentially - with all the online tutorials, ransomware is going to be the replacement of the nigerian (or wherever) mail scams soon.
Encryption will not help you, because ransomware encrypts your encrypted drive. It is like zipping an already zipped file, with a additional password. Drive encryption is a security measures in case someone steals your drive physically.
My NAS is hanging to my internet box, since the latter also does routing for me, but I think I will decouple them and buy a separate more secured router. I would hate it to lose 20 years of pictures because of a ransomware - and no, even losing the pictures of my kids are not worth money to villains.
As for speed, my work laptop has encryption, and it is fast as hell, so: no, no slow down on daily use.
|
|
|
|
|
Rage wrote: As for speed, my work laptop has encryption, and it is fast as hell, so: no, no slow down on daily use.
I'm looking at replacing my personal development laptop next month and I'm evaluating a number of options. What are your laptop specifications or what would you recommend.
Development environment is mainly visual studio & Microsoft Sql Server.
|
|
|
|
|
I just bought a Dell XPS15 with touch screen and an I9 processor. It screams. I have a program to convert 85 GB of WMA files to MP3 for my phone - < 2 hours to do the conversion. My previous Dell XPS13 took a little over 12 hours and my server takes about 6 hours for the same conversion.
|
|
|
|
|
I did not choose it, this was the company standard three years ago, but I still have it - should be replaced soon.
It is a XEON CPU E3-1505M v5 @2.8 GHz with 32Gb RAM. No SSD.
HEre : Benchmark[^]
I unfortunately cannot recommend anything, I am not aware of latest hardware.
|
|
|
|
|
Rage wrote: Drive encryption is a security measures in case someone steals your drive physically.
Came here to post exactly that. It'll block someone who gets ahold of the physical drive and tries to read it without being able to log into the OS that encrypted it. So it won't make any difference for someone trying to access a system remotely. The OS is up, the encrypted file system is mounted, and all files can be read.
|
|
|
|
|
Voilà. 
|
|
|
|
|
Slow Eddie wrote: I have been thinking about encrypting my hard drives
That won't be necessary for you to do. Just wait for the attack, and it will take care of the encryption task.
|
|
|
|
|
I've encrypted my hard drives for years. In December 2003 there was a physical break-in at the TriWest (US Military insurance carrier for retired and dependents) facility in Arizona. The servers were stolen. I had to deal with fraudulently opened credit lines as a result.
|
|
|
|
|
If you have a "public" IP address, the Windows Security logs will tell you "who" is trying to get in. It used to be mostly Chinese IP address; repeatedly trying: Admin, Guest, Guest1, etc. etc.
Like automated telephone dialers.
"Before entering on an understanding, I have meditated for a long time, and have foreseen what might happen. It is not genius which reveals to me suddenly, secretly, what I have to say or to do in a circumstance unexpected by other people; it is reflection, it is meditation." - Napoleon I
|
|
|
|
|
I've seen a significant decrease in brute force attacks on my public facing ftp server over the last 5 years. While the number of attacks is declining, they now seem more personal, using words and names from the website instead of just Admin/Administrator/user/root/etc. Maybe they caught on that the 'Administrator' ftp account was read-only and moved on. 
"Go forth into the source" - Neal Morse
"Hope is contagious"
|
|
|
|
|
It isn't just Russia. Add China, North Korea, Iran, and yes, the USA to that list.
If you think 'goto' is evil, try writing an Assembly program without JMP.
|
|
|
|
|
I'm uploading tons of anti-Putin memes.
Hack this, you bastard!
|
|
|
|
|
Most people in this world have more interesting profiles to be hacked than me.
Even if they did hack me, then what? I'm not "rich" enough to be blackmailed or being held for ransom.
So not being that more careful than I already was.
|
|
|
|
|
They'll attack anything that is "open"; there's no "person" on the other end. They'll take anything they can get. You are not "too small" because they always hope to get lucky.
3 days to rebuild a system you don't care about is still no picnic.
"Before entering on an understanding, I have meditated for a long time, and have foreseen what might happen. It is not genius which reveals to me suddenly, secretly, what I have to say or to do in a circumstance unexpected by other people; it is reflection, it is meditation." - Napoleon I
|
|
|
|
|
I am being recruited by a guy from psi-staffing.net. I tried to look at the company's website to see if it is legit, or just a scam.
Have any of you had any dealings with this company? If so, what is your opinion?
ed
|
|
|
|
|
Slow Eddie wrote: psi-staffing
Sounds like a lot of hot air. (under pressure) 
"Go forth into the source" - Neal Morse
"Hope is contagious"
|
|
|
|
|
That was my thought too.
ed
|
|
|
|
|
There web site is not very impressive.
psi-staffing.net gives a 404.
|
|
|
|
|
I get emails from recruiters 2-3 times per week, rarely from the same outfit, and only 25% of them are in any way relevant to my skillset and experience. I've even had them try to recruit me for a receptionist position. Sorry, but I can't develop software and answer the phones at the same time. 
If you think 'goto' is evil, try writing an Assembly program without JMP.
|
|
|
|
General 
News 
Suggestion 
Question 
Bug 
Answer 
Joke 
Praise 
Rant 
Admin 
Submit an article or tip
