Show newer

(Long quote, sorry)

Forensic analysis of the attack performed by our independent cyber-security advisors has identified evidence of an external presence on the Library network at 23:29 on Wednesday 25 October 2023, with the first evidence of movement around the network at 23:32. Later that night, at 01:15 on 26 October 2023, the Library’s IT Security Manager was alerted to possible malicious activity on the Library network. This alert came from the Library’s Monitoring System which had automatically blocked the suspect activity at 00:21. The IT Security Manager, among other actions, extended the automatic block beyond the pre-set expiry, undertook a vulnerability scan (which came back with no results) and actively monitored activity log. No repeat activity was seen. The incident was escalated to the IT Infrastructure team at 07:00. Further investigation by the IT Infrastructure Team, including detailed analysis of activity logs, did not identify any obviously malicious activity and they subsequently performed a password reset before unblocking the account later that day.
Here we go. It's very common that the attack is detected, but ignored or not understood. This is what happened with the Conti attack on the Irish Health Service as well.

Running a "vulnerability scan" is insufficient. If malicious activity is detected, vuln scans are equivalent to telling a gunshot wound patient that you're gonna check to see if they're wearing Kevlar.

while we have secure copies of all our digital collections – both born-digital and digitised content, and the metadata that describes it – we have been hampered by the lack of viable infrastructure on which to restore it.
Right off the bat we're about to see a difference between what happens in a major enterprise and a cultural institution with limited means. They simply did not have the capacity to recover, given that they did not pay the ransom and systems remained encrypted.

And you might think "Oh just reimage all of them." I cannot stress enough to you how undersized library and museum IT staffs always are.

Show thread

Good morning, nerds! The British Library just dropped its after-incident report on the ransomware attack that has disabled the Library for, uh, months?

Let's dig in.

Corporations will, 99% of the time, take things you bought away from you if...

  1. They are not making (enough) money on them any more
  2. They can and get away with it

Simply because they want to clear the stage of all competition for their next offering, including old offerings you may be happy with so you don't want the new one.

The 1% that don't do this are orgs that either understand "Good will" and trust have value, or are somehow genuinely not shitheads. They will almost invariably in time be bought out by someone who will do this.

The release->maintain->extinguish cycle is, also, accelerating. So you're getting less time with things before corps try to take them away again.

This dog wants your 12 points (and he will lay on ALL your furniture and whine if you don't vote for him)

📸 @hikari
#FursuitFriday #fursuit #furry #NFC2024

im sure im not the first person to make this joke but it came to me in a dream so i was compelled

the long search for a new phone is over!
i think i made the best decision in the end

Show thread

Open if woman 

Happy Women's day
:blobcat_flower:

Happy women's day to all girls, girlthings, and everyone who celebrates UwU

an exciting personal report from the world of "e-identification" (sweden)

in sweden, life revolves around the "mobile bankid". this is a service owned by major swedish banks that provides a smartphone app equivalent to a state id card, but which can be used to log into websites

I love semantic HTML. Each input field is so easy to describe in a sensible way. It can even be used by plugins and user-scripts.

Anyways the point I am making is that if “I don’t understand this” is in any part of your reasoning chain the final result needs to also be “I don’t understand this” not “things don’t work this way”
Show thread
I have noticed a worrying trend in computer science where topics that are have surprising, non-intuitive properties are now taught as “oh, treat this as a magic black box, you will never understand it”. I hate this as people then “teach” by discouraging exploration in the space

Robotgirls can have a random.choice(TREATS), as a treat

sdb: detected capacity change from 2111864832 to 0

awww, my bytes are gone

Show thread

for women's day you can help a woman (me) who is in a bad situation with immigration out by giving money to my ko-fi: ko-fi.com/sharkhugseniko

i already didn't really have enough to last until kitsune tails release and now we have to deal with extra fees and fines that could total over 10,000 euros

Show older
Computer Fairies

Computer Fairies is a Mastodon instance that aims to be as queer, friendly and furry as possible. We welcome all kinds of computer fairies!