Author Topic: Cryptolocker  (Read 30158 times)

0 Members and 1 Guest are viewing this topic.

Offline D4D

  • Hard Top Camper User
  • ******
  • Posts: 16019
  • Thanked: 391 times
  • Are we there yet?
Re: Cryptolocker
« Reply #50 on: September 17, 2014, 01:30:01 PM »
You made a very broad statement that you can't/won't backup. I think it is you who has their hand on it.
I owe, I owe, it’s off to work I go…

Work - Outback
Play - Prado

Offline paceman

  • Hard Top Camper User
  • ******
  • Posts: 3226
  • Thanked: 266 times
  • Gender: Male
Re: Cryptolocker
« Reply #51 on: September 17, 2014, 01:43:57 PM »
Cloud backup adds complexity; gives one a false sense of security while being screwed; and adds precisely nothing except increased risk. The latter is not unlike ? [Beta] risk analysis of an investment portfolio in accounting ... The risk can be reduced, but only if one actually does the risk analysis in the first place ... :( . This is not done by most for the same reason they cannot be bothered doing backup properly in the first place.

cloud backup shouldn't add complexity if it is done correctly.

i, for one, have an increased sense of security knowing that my data is backed up in multiple locations, including the cloud.  i don't feel like i am being screwed at all.

i know for a fact that a properly implemented cloud backup adds real and tangible benefits to a multi-faceted backup solution.  to say it adds nothing but risk is nonsense.

as has been espoused by others on this forum and elsewhere, a good backup solution includes diverse media, multiple versioning and multiple locations.

cloud backup allows for all three of these requirements to be implemented cheaply and effectively for home and business use.

if you choose not to implement cloud backup, that is your choice, but to dismiss it outright is a bit insulting to those of us who have implemented it to good effect.




Offline Ratbag

  • Soft Floor Camper User
  • ****
  • Posts: 486
  • Thanked: 13 times
Re: Cryptolocker
« Reply #52 on: September 17, 2014, 01:45:18 PM »
You made a very broad statement that you can't/won't backup. I think it is you who has their hand on it.


Sorry, sport.

That is a statement that I decline to "back up" to you in particular. Perhaps it has something to do with an attitude problem?

And that attitude problem sure ain't on this side of the fence ...

As just one source, you could try reading this PDF.

Or here.

There are many other issues that aren't even mentioned by either of these articles, such as corporate governance/status/security of the company or companies to whom you are entrusting your information; the fact that the Internet is inherently ephemeral and insecure; etc, etc.

You see, I recall IBM nearly going to the wall because of the introduction of the PS2 bus, and its failure to make that an open standard. IBM in the late 1980s was a bigger company than just about everyone except the RC church ... Somewhat bigger than the typical cloud backup companies are, I would have thought.

Offline Ratbag

  • Soft Floor Camper User
  • ****
  • Posts: 486
  • Thanked: 13 times
Re: Cryptolocker
« Reply #53 on: September 17, 2014, 01:51:40 PM »
Gidday Paceman

cloud backup shouldn't add complexity if it is done correctly.

i, for one, have an increased sense of security knowing that my data is backed up in multiple locations, including the cloud.  i don't feel like i am being screwed at all.

i know for a fact that a properly implemented cloud backup adds real and tangible benefits to a multi-faceted backup solution.  to say it adds nothing but risk is nonsense.

as has been espoused by others on this forum and elsewhere, a good backup solution includes diverse media, multiple versioning and multiple locations.

cloud backup allows for all three of these requirements to be implemented cheaply and effectively for home and business use.

if you choose not to implement cloud backup, that is your choice, but to dismiss it outright is a bit insulting to those of us who have implemented it to good effect.

As an independent computer consultant, I am constantly bombarded with material from companies offering me re-sale rights on this stuff.

I am yet to see anything that overcomes most of my concerns. See my reply to D4D immediately above.

I do not have much of a problem if anyone wishes to implement cloud backup as part of a holistic approach to backup generally. I have a huge problem with reliance on it solely.

It is also a lousy solution for someone like me who has large files that cannot be incrementally backed up. Even with huge bandwidth, this problem would remain. I am very unlikely to ever be able to afford or justify Gbps upload speeds. I wish I could. Then I would merely backup everything to my own web site, on which I have virtually unlimited storage capacity ...

Offline paceman

  • Hard Top Camper User
  • ******
  • Posts: 3226
  • Thanked: 266 times
  • Gender: Male
Re: Cryptolocker
« Reply #54 on: September 17, 2014, 01:56:23 PM »
As just one source, you could try reading this PDF.

Or here.



did you even read this part in the pdf you have linked?

The cloud does offer a great way for backup and restore needs to be dealt with in a cost- and business-effective manner. However, if approached in the wrong way, it will be costly and may not provide the peace of mind that the organisation expects

sounds like they are quite happy to implement a cloud backup, as long as it is done properly.

also, the informationweek article you have linked to has it's main premise in the fact that the initial seed of the cloud backup is the issue, not the cloud backup itself.  the initial seed of the backup is not really the cloud's fault either.  that fault lies with the isp you are using.

they also suggest using a multiple media solution (tap, in this case) to allow for initial seeding and also offsite storage of backups.

these articles do nothing to 'back up' your premise that cloud backup does nothing but increase risk.

Offline paceman

  • Hard Top Camper User
  • ******
  • Posts: 3226
  • Thanked: 266 times
  • Gender: Male
Re: Cryptolocker
« Reply #55 on: September 17, 2014, 02:02:06 PM »
I do not have much of a problem if anyone wishes to implement cloud backup as part of a holistic approach to backup generally. I have a huge problem with reliance on it solely.

but that's not what you stated.  and i quote:

"Cloud backup adds complexity; gives one a false sense of security while being screwed; and adds precisely nothing except increased risk."

as always, you have to find a balance when it comes to backups and also derive a value for your data, ie: how much is it worth to you or your business.

and on a side not, backing up everything to your own website might constitute a cloud backup.  a private cloud, but a cloud backup, nonetheless...

Offline Ratbag

  • Soft Floor Camper User
  • ****
  • Posts: 486
  • Thanked: 13 times
Re: Cryptolocker
« Reply #56 on: September 17, 2014, 02:04:13 PM »
did you even read this part in the pdf you have linked?

Read both of them. That's a five second search worth of independent thought on the subject. It is not meant to represent ALL of my thoughts on the subject ...

Quote
The cloud does offer a great way for backup and restore needs to be dealt with in a cost- and business-effective manner. However, if approached in the wrong way, it will be costly and may not provide the peace of mind that the organisation expects

sounds like they are quite happy to implement a cloud backup, as long as it is done properly.

also, the informationweek article you have linked to has it's main premise in the fact that the initial seed of the cloud backup is the issue, not the cloud backup itself.  the initial seed of the backup is not really the cloud's fault either.  that fault lies with the isp you are using.

they also suggest using a multiple media solution (tap, in this case) to allow for initial seeding and also offsite storage of backups.

these articles do nothing to 'back up' your premise that cloud backup does nothing but increase risk.

The risk mostly (but not totally) arises as a result of lots of things that are external to the actual backup on a remote server and disk farm.

If you cannot see them, you probably won't ever see them.

An unverified backup is not worth the media it may have been written to ...
However, any backup is better than no backup, when all is said and done.

Offline Ratbag

  • Soft Floor Camper User
  • ****
  • Posts: 486
  • Thanked: 13 times
Re: Cryptolocker
« Reply #57 on: September 17, 2014, 02:08:59 PM »
but that's not what you stated.  and i quote:

"Cloud backup adds complexity; gives one a false sense of security while being screwed; and adds precisely nothing except increased risk."

If I were writing this for a legal audience, perhaps I would choose my words with greater precision ... Silly me, I thought that this was a camper trailer forum ...
Feel free to add in the word "perhaps" between "except" and "increased" if ytou feel the need to do so ...

Quote
as always, you have to find a balance when it comes to backups and also derive a value for your data, ie: how much is it worth to you or your business.

and on a side not, backing up everything to your own website might constitute a cloud backup.  a private cloud, but a cloud backup, nonetheless...

Agreed.

One over which I have some direct element of control and 'ownership', however ...

Offline paceman

  • Hard Top Camper User
  • ******
  • Posts: 3226
  • Thanked: 266 times
  • Gender: Male
Re: Cryptolocker
« Reply #58 on: September 17, 2014, 02:16:42 PM »
If I were writing this for a legal audience, perhaps I would choose my words with greater precision ... Silly me, I thought that this was a camper trailer forum ...
Feel free to add in the word "perhaps" between "except" and "increased" if ytou feel the need to do so ...


regardless of the type of forum, we can only go on what has been said, not what should have or could have been said.

your blanket statement, as it stood, directly conflicted with the opinions of some (including mine) with regards to cloud backups.  hence the following discourse.

it was the blanket nature of the statement, not your personal opinion, that caused me (and others) to 'fight back'.

in the end, backups are important.  the end.


Offline Ratbag

  • Soft Floor Camper User
  • ****
  • Posts: 486
  • Thanked: 13 times
Re: Cryptolocker
« Reply #59 on: September 17, 2014, 02:57:15 PM »
^ G'day again Paceman

Agreed.

And what's the little aphorism in your short-form user profile again? "Don't sweat the petty stuff ... "  :cheers: .
We can all do without that, IMHO.

BTW, where were all the commentators when I posted (in this thread ... ) that there is a FREE solution to the Cryptolocker and Gameover Zeus scams/viruses?

Offline Homer_Jay

  • Soft Floor Camper User
  • ****
  • Posts: 464
  • Thanked: 13 times
  • Gender: Male
Re: Cryptolocker
« Reply #60 on: September 17, 2014, 03:06:34 PM »
Just one question..... Should I use 6 B&S wiring to wire up to my back-up??
 ;D ;D ;D


Sorry, I got idea what you guys are talking about....... Let's go camping!



Landcruiser 76 wagon V8 T/D

Supreme Getaway pop top 12 ft

Offline D4D

  • Hard Top Camper User
  • ******
  • Posts: 16019
  • Thanked: 391 times
  • Are we there yet?
Re: Cryptolocker
« Reply #61 on: September 17, 2014, 06:18:25 PM »
Just one question..... Should I use 6 B&S wiring to wire up to my back-up??

I bet ratbag will tell us he has managed to get Ethernet running over 6B&S
I owe, I owe, it’s off to work I go…

Work - Outback
Play - Prado

Offline D4D

  • Hard Top Camper User
  • ******
  • Posts: 16019
  • Thanked: 391 times
  • Are we there yet?
Re: Cryptolocker
« Reply #62 on: September 17, 2014, 06:21:14 PM »
Sorry, sport.

That is a statement that I decline to "back up" to you in particular. Perhaps it has something to do with an attitude problem?

And that attitude problem sure ain't on this side of the fence ...

As just one source, you could try reading this PDF.

Or here.

There are many other issues that aren't even mentioned by either of these articles, such as corporate governance/status/security of the company or companies to whom you are entrusting your information; the fact that the Internet is inherently ephemeral and insecure; etc, etc.

You see, I recall IBM nearly going to the wall because of the introduction of the PS2 bus, and its failure to make that an open standard. IBM in the late 1980s was a bigger company than just about everyone except the RC church ... Somewhat bigger than the typical cloud backup companies are, I would have thought.



You still haven't answered the original question and try and divert attention to some other discussion of yesteryear.

Maybe you can enlighten us to why AWS and MSFT have it all wrong...
I owe, I owe, it’s off to work I go…

Work - Outback
Play - Prado

Offline Ratbag

  • Soft Floor Camper User
  • ****
  • Posts: 486
  • Thanked: 13 times
Better things to do than this ...
« Reply #63 on: September 17, 2014, 06:24:24 PM »
N/T

Offline Bird

  • Once Was Lost, now am found
  • Hard Top Camper User
  • ******
  • Posts: I am a geek!!
  • Thanked: 1874 times
  • Gender: Male
  • Life is far too long....
    • My Place.
-
Click to enlarge

Gone to a new home

Offline Mik01

  • Soft Floor Camper User
  • ****
  • Posts: 406
  • Thanked: 8 times
    • Scenic Rim 4x4
Re: Cryptolocker
« Reply #65 on: September 17, 2014, 10:39:47 PM »
NERD FIGHT!!!!!!!

 >:D
Contact me for special MySwag prices on 4x4 accessories!
http://scenicrim4x4.com.au

Offline Mik01

  • Soft Floor Camper User
  • ****
  • Posts: 406
  • Thanked: 8 times
    • Scenic Rim 4x4
Re: Cryptolocker
« Reply #66 on: September 17, 2014, 10:43:14 PM »


Sorry, couldn't resist
« Last Edit: September 17, 2014, 10:50:17 PM by Mik01 »
Contact me for special MySwag prices on 4x4 accessories!
http://scenicrim4x4.com.au

Offline Symon

  • Big sparks r us
  • Electrimagician
  • Hard Top Camper User
  • *****
  • Posts: 5691
  • Thanked: 173 times
  • Gender: Male
  • www.phased.com.au
    • Web Server in a Box Project
Re: Cryptolocker
« Reply #67 on: September 18, 2014, 06:31:53 AM »
I bet ratbag will tell us he has managed to get Ethernet running over 6B&S

Probably a poor example there mate, as it is technically possible to do that.  :)

Look at you IT guys go, and people pay out on sparkies for being prickly.
Do not PM me for technical advice - start a thread.
HDJ79 Ute - 100 Series Sahara - 2002 Kimberley Kamper - No ATS yet - Survivor of 5 McGirr trips-Cape 09,11,12,14 & Gulf 13

Offline Ratbag

  • Soft Floor Camper User
  • ****
  • Posts: 486
  • Thanked: 13 times
Re: Cryptolocker
« Reply #68 on: September 18, 2014, 09:24:42 AM »
Thanks for the link, Bird

http://www.theage.com.au/it-pro/security-it/hackers-lock-up-thousands-of-australian-computers-demand-ransom-20140917-10hyyh.html


Quote
Keeping regular multi version backups is a always good idea, but please remember keep the backups offline. That means not backing up to the cloud but an external drive that's then disconnected from your computer and network and kept off site. Cryptolocker will find and encrypt all of your backups if they're just on an external hard drive that's connected or a network share.

Commenter
Michael LocationAdelaide
Date and timeSeptember 17, 2014, 4:05PM




Quote
As an Systems Engineer I've seen this once in a corporation and once in an individual.

The corporation had backups, we removed the offending/infected PC off the network, reimaged it and then restored the network files that were encrypted.

The individual however wasn't as lucky, recent documents were corrupt, fortunately older docs were backed up to the cloud in a couple of locations. So it wasn't a huge loss, just a few documents having to be rewritten.

The most important thing here isn't the backups, though they are important, the most important thing is NOT TO OPEN EMAIL ATTACHMENTS regardless of who they are from, especially if you don't normally receive emails from those particular companies.

Always avoid opening compressed files (ZIP, RAR, 7z)

Don't open a document file unless you're expecting it (doc, docx, pdf, xls, xlsx, etc...) and if you weren't expecting it call whomever sent it and ask if they did.

And finally, IF IT LOOKS SUSPICIOUS IT PROBABLY IS!!!

Commenter
BonezOz LocationSydney
Date and timeSeptember 17, 2014, 4:25PM


A quote or two from that link. Hmm. Now where have I heard that before?

See also here:

http://www.bleepingcomputer.com/forums/t/525028/cryptoprevent-does-it-work/#entry3295401

and other posts in that thread regarding protection from this virus.

Instead of running around shouting "Panic, Panic" (Hagar ... ), maybe some should be investigating prevention ... ?

Such as Cryptoprevent s/w:

http://www.bleepingcomputer.com/forums/t/525028/cryptoprevent-does-it-work/#entry3294321

Or Malwarebytes full version ...

And thanks, Symon, I did know that it can be made to work like that, just not very well ... ;) :).


Offline Bird

  • Once Was Lost, now am found
  • Hard Top Camper User
  • ******
  • Posts: I am a geek!!
  • Thanked: 1874 times
  • Gender: Male
  • Life is far too long....
    • My Place.
Re: Cryptolocker
« Reply #69 on: September 18, 2014, 09:55:12 AM »
-
Click to enlarge

Gone to a new home

Offline paceman

  • Hard Top Camper User
  • ******
  • Posts: 3226
  • Thanked: 266 times
  • Gender: Male
Re: Cryptolocker
« Reply #70 on: September 18, 2014, 10:03:15 AM »
A quote or two from that link. Hmm. Now where have I heard that before?


probably from me, champ.  don't be afraid.  put my name on your barb.

Offline Ratbag

  • Soft Floor Camper User
  • ****
  • Posts: 486
  • Thanked: 13 times
Re: Cryptolocker
« Reply #71 on: September 18, 2014, 10:25:08 AM »
Gidday Paceman

probably from me, champ.  don't be afraid.  put my name on your barb.


Probably from all sorts of people who are actually experienced and knowledgeable in this field ...

BTW, I don't have a "barb". I am incapable of bearing a grudge.
However I will react in much the same way when confronted with much the same behaviour. If a particular person starts behaving differently, then my reaction to them will be different accordingly. Don't ask why, I won't tell you. I have at least learned that much in my fairly long life.

Malwarebytes has just earned a 100% detection and removal score from AV test .org. You can read about it here:

http://www.malwarebytes.org/awards/

It is one of the programs I use routinely.

The home version is free, or home premium is $24.95 for three seats. Business version up to 99 seats is $24.95/seat (I assume that's USD).

I suppose it depends on how much your data is worth to you, and how many days your IT people want to spend preventing and recovering from the inevitable failure by a single person. A whole day of lost productivity for a firm costs a lot more than $24.95 per person ... Just putting my CPA hat on for a bit ...

BTW, I just got another two offers to improve my bottom line by selling cloud storage last night. On average I get about 2-3 a week ...

Offline Ratbag

  • Soft Floor Camper User
  • ****
  • Posts: 486
  • Thanked: 13 times
Re: Cryptolocker
« Reply #72 on: September 18, 2014, 11:10:23 AM »
Some very good advice from this guy, as certain people here seem not to want to take anything I say as being worthwhile ...
After all, what could I possibly have learned after being in the IT business for 40+ years?

http://askleo.com/why-havent-you-mentioned-cryptoprevent/

The PDF file can be downloaded here:

http://med.askleomedia.com/ebooks/InternetSafety.pdf

FWIW ...

Offline paceman

  • Hard Top Camper User
  • ******
  • Posts: 3226
  • Thanked: 266 times
  • Gender: Male
Re: Cryptolocker
« Reply #73 on: September 18, 2014, 11:29:08 AM »
Some very good advice from this guy, as certain people here seem not to want to take anything I say as being worthwhile ...
After all, what could I possibly have learned after being in the IT business for 40+ years?


your comment regarding cloud backups offering nothing but increased risk is what certain people deemed as not being worthwhile.  as previously stated.

no-one in this thread is doubting the other advice you have provided, so perhaps adjust your position on the high horse you seem to have...

you are not the only one who has been in the business for multiple decades.

Offline Ratbag

  • Soft Floor Camper User
  • ****
  • Posts: 486
  • Thanked: 13 times
Re: Cryptolocker
« Reply #74 on: September 18, 2014, 11:57:45 AM »
your comment regarding cloud backups offering nothing but increased risk is what certain people deemed as not being worthwhile.  as previously stated.

Perhaps some people shouldn't be quite so fast to "cry 'havoc', and let slip the dogs of war" ... Just a thought ... ;).
BTW, I still have serious reservations about cloud backup and storage systems. Nothing that hasn't been presented here has changed my mind on that. Given the reception of some people here, I am now highly unlikely ever to detail those reservations here ...

Quote
no-one in this thread is doubting the other advice you have provided, so perhaps adjust your position on the high horse you seem to have...

I don't own a high horse, either. The stock pony I used to have was only 13.2 hands high ...

Quote
you are not the only one who has been in the business for multiple decades.

I have never suggested that I was ...

When I was trouble-shooter of last resort for a major Oz company (open cheque consultant, not an employee), I had a 100% success rate after their internal programmers and help desk people had failed, and their database engine provider had likewise failed. I have a written testimonial to that effect from the then MD of that company. That doesn't mean that I've got any tickets on myself - I haven't, and never have had - but it does tend to indicate that I am fairly competent at what I do. It also doesn't mean that I can't learn from others. A 12 y.o. lad once taught me a trick that I use to this day.

If one keeps an open mind, one can learn something from everyone. If one leaps in and starts attacking someone, then one can hardly blame them for being defensive, if not outright hostile.