Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.os.linux.advocacy > #343738

Re: Windows?

Show all headers | View raw

On Tue, 16 Feb 2016 14:19:17 -0500
"Ezekiel" <zeke@nosuchemail.com> wrote:

> "Melzzzzz" <mel@zzzzz.com> wrote in message 
> news:20160216195425.1b1906d8@maxa-pc...
> > On Tue, 16 Feb 2016 13:42:52 -0500
> > "Ezekiel" <zeke@nosuchemail.com> wrote:
> >  
> >> "Melzzzzz" <mel@zzzzz.com> wrote in message
> >> news:20160216191422.48cb0e82@maxa-pc...  
> >> > http://www.techtimes.com/articles/133874/20160216/hackers-hold-hollywood-hospital-s-computer-system-hostage-demand-3-6-million-as-patients-transferred.htm
> >> > "
> >> > Hackers have taken the computer system of the Hollywood
> >> > Presbyterian Medical Center hostage, demanding 9,000 Bitcoin or
> >> > $3.6 million. "  
> >>
> >>     "The administration has forbidden the use of other computers
> >>     for fear that the harmful software could spread to more
> >> workstations."
> >>
> >> Most likely Windows if it's workstations.
> >>
> >> I could see local data being encrypted/taken-hostage but all the
> >> important stuff at a hospital should be on some backend DB running
> >> on a server. IT should constantly be backing up this data. If the
> >> servers weren't compromised (and they shouldn't have) then what
> >> does the $3.6M get them?  
> >
> > Problem is always one machine that keeps important password(s).
> > That goes like that. User plugs in usb key with game or
> > access some malware site, etc. When hacker gets passwords for
> > access to server, all is lost. No matter OS on the server.  
> 
> You'd expect that passwords to the production server and the password
> to the production database would be better protected.

Yep. But obviously that was not the case.

 Most likely the
> person who has these passwords wasn't the one infected. A employee at
> some workstation shouldn't be able to access any resources like this.

I disagree. They overtook whole system, so it seems. That can't be done
without having access to critical accounts.

Back to comp.os.linux.advocacy | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Windows? Melzzzzz <mel@zzzzz.com> - 2016-02-16 19:14 +0100
  Re: Windows? "Ezekiel" <zeke@nosuchemail.com> - 2016-02-16 13:42 -0500
    Re: Windows? Melzzzzz <mel@zzzzz.com> - 2016-02-16 19:54 +0100
      Re: Windows? "Ezekiel" <zeke@nosuchemail.com> - 2016-02-16 14:19 -0500
        Re: Windows? Melzzzzz <mel@zzzzz.com> - 2016-02-16 20:52 +0100
          Re: Windows? "Ezekiel" <zeke@nosuchemail.com> - 2016-02-16 15:23 -0500
      Re: Windows? Desk Rabbit <me@example.com> - 2016-02-17 12:44 +0000
  Re: Windows? owl <owl@rooftop.invalid> - 2016-02-16 20:05 +0000
    Re: Windows? "Ezekiel" <zeke@nosuchemail.com> - 2016-02-16 15:34 -0500
      Re: Windows? owl <owl@rooftop.invalid> - 2016-02-16 21:05 +0000
        Re: Windows? "Ezekiel" <zeke@nosuchemail.com> - 2016-02-16 16:42 -0500
          Re: Windows? owl <owl@rooftop.invalid> - 2016-02-16 22:13 +0000
            Re: Windows? DFS <nospam@dfs.com> - 2016-02-16 19:41 -0500
              Re: Windows? owl <owl@rooftop.invalid> - 2016-02-17 00:49 +0000
                Re: Windows? DFS <nospam@dfs.com> - 2016-02-16 20:05 -0500
        Re: Windows? Desk Rabbit <me@example.com> - 2016-02-17 14:16 +0000
          Re: Windows? owl <owl@rooftop.invalid> - 2016-02-17 18:59 +0000
  Re: Windows? John Gohde <john.h.gohde@gmail.com> - 2016-02-17 05:11 -0800

csiph-web