All my source code gone!
-
Absolutely! One important part of my job is to setup backup plans for my clients. If I had done things like they did, I would be fired now. Typically, any one of my clients could undergo a fire, I would still be able to setup a new platform in a few hours. This story is just such a shame.
There are two kinds of people in the world: those who separate humankind in two distinct categories, and those who don't. "I have two hobbies: breasts." DSK
That's one of my problems with the cloud: you have no idea who is doing the actual storage, and what exactly they are doing. Do they backup? Or save money by hope-and-pray? What kind of people do they employ - apart from "the cheapest possible"? They will have total access to my data - so what are they going to do with it? You may have guessed, I don't keep anything serious out there! :laugh:
Those who fail to learn history are doomed to repeat it. --- George Santayana (December 16, 1863 – September 26, 1952) Those who fail to clear history are doomed to explain it. --- OriginalGriff (February 24, 1959 – ∞)
-
I guess I'll say, there's something suspicious here. The grammar is terrible, and the very concept that backup data could be wiped is hard to believe. Furthermore, they talk about DDOS but also someone who had access to their control panel. How are those two related? And then there's this bizarre statement: Upon realisation that somebody had access to our control panel we started to investigate how access had been gained and what access that person had to the data in our systems, it became clear that so far no machine access had been achieved due to the intruder not having our Private Keys. No machine acccess...not having private keys? What does the double negative mean? And why would you even futz around "investigating" if you thought access was compromised? I would instantly change passwords, keys, etc. At this point we took action to take control back of our panel by changing passwords, however the intruder had prepared for this and had already created a number of backup logins And you didn't check for this? Supposedly compounding the problem? And why hasn't this story been picked up in the news? There is absolutely no mention of it anywhere that I've found. To be honest, this looks like a "take the money and run" scheme. Marc
Latest Article - APOD Scraper
-
I put all my personal source code in private repository hosting. Yesterday night, I was working on a personal project and it failed to check in my code. I thought it was just routine system maintenance. Just now I went to the website and saw this notice[^]: The short story was a hacker failed to extort money from them and proceeded to delete all/most of the repo and snapshots. I think I cannot sleep tonight! :( They advertised Oracle was one of their customers. I wondered how much Oracle lost.
Never put stuff you care about in the cloud without local working copies! It sucks that a provider was taken down (although I agree that the explanation seems pretty implausible and it sounds like a take-the-money-and-run type of thing), but you should never lose data if a remote provider goes down or becomes unavailable. Disk space is so cheap that there's no point in ever deleting any of your local source code, it will all add up to less than one video or CD unless you're really prolific.
-
I put all my personal source code in private repository hosting. Yesterday night, I was working on a personal project and it failed to check in my code. I thought it was just routine system maintenance. Just now I went to the website and saw this notice[^]: The short story was a hacker failed to extort money from them and proceeded to delete all/most of the repo and snapshots. I think I cannot sleep tonight! :( They advertised Oracle was one of their customers. I wondered how much Oracle lost.
The posting makes no sense to me. A big one is how would you lose the offsite backups? Sounds to me like an insider with a grudge did the deed.
-
I put all my personal source code in private repository hosting. Yesterday night, I was working on a personal project and it failed to check in my code. I thought it was just routine system maintenance. Just now I went to the website and saw this notice[^]: The short story was a hacker failed to extort money from them and proceeded to delete all/most of the repo and snapshots. I think I cannot sleep tonight! :( They advertised Oracle was one of their customers. I wondered how much Oracle lost.
Not wishing to take advantage of your misfortune, but this just confirms my distaste/distrust for "the Cloud".
"The difference between genius and stupidity is that genius has its limits." - Albert Einstein
"As far as we know, our computer has never had an undetected error." - Weisert
"If you are searching for perfection in others, then you seek disappointment. If you are seek perfection in yourself, then you will find failure." - Balboos HaGadol Mar 2010
-
Ouch, that sucketh. But just more evidence that "no one else but you can keep your stuff safe". I agree with the others that this whole "cloud" thing is a very bad idea.
You'll never get very far if all you do is follow instructions.
Looking at my tiny TFS Express VM, which is quietly using 1.5 out of the 32GB of RAM on the multi-purpose VM host I put together for under $1000... Looking at the external backup drive sitting next to it, which was last updated on Sunday (only because my source hasn't changed this week). Currently physically disconnected. My offsite backup drive is a one-hour drive away. No cloud here. I like to think I'm doing ok.
-
The posting makes no sense to me. A big one is how would you lose the offsite backups? Sounds to me like an insider with a grudge did the deed.
Certainly doesn't pass the smell test...
".45 ACP - because shooting twice is just silly" - JSOP, 2010
-----
You can never have too much ammo - unless you're swimming, or on fire. - JSOP, 2010
-----
When you pry the gun from my cold dead hands, be careful - the barrel will be very hot. - JSOP, 2013 -
I put all my personal source code in private repository hosting. Yesterday night, I was working on a personal project and it failed to check in my code. I thought it was just routine system maintenance. Just now I went to the website and saw this notice[^]: The short story was a hacker failed to extort money from them and proceeded to delete all/most of the repo and snapshots. I think I cannot sleep tonight! :( They advertised Oracle was one of their customers. I wondered how much Oracle lost.
Sorry for your data loss. I find it very suspicious that the service can't restore older backups. Going forward, you may want to consider using Visual Studio Online (Basic)[^]. It's free (for up to 5 users) and I've found it to be extremely reliable and very fast. /ravi
My new year resolution: 2048 x 1536 Home | Articles | My .NET bits | Freeware ravib(at)ravib(dot)com
-
That's one of my problems with the cloud: you have no idea who is doing the actual storage, and what exactly they are doing. Do they backup? Or save money by hope-and-pray? What kind of people do they employ - apart from "the cheapest possible"? They will have total access to my data - so what are they going to do with it? You may have guessed, I don't keep anything serious out there! :laugh:
Those who fail to learn history are doomed to repeat it. --- George Santayana (December 16, 1863 – September 26, 1952) Those who fail to clear history are doomed to explain it. --- OriginalGriff (February 24, 1959 – ∞)
Virtual Machines have greatly simplified backup tasks, I must confess. Nowadays a reverse-incremental backup of a big server can take ten minutes when it needed hours before; and restorations of a full server are really trivial with virtual hardware abstraction layers. That's why I can't understand that a company, whose job is to take care of the files of its users, does lose these files. That seems as odd to me as a fiscal administration who would lose your informations; that can't happen. And yet, it does...
There are two kinds of people in the world: those who separate humankind in two distinct categories, and those who don't. "I have two hobbies: breasts." DSK
-
I put all my personal source code in private repository hosting. Yesterday night, I was working on a personal project and it failed to check in my code. I thought it was just routine system maintenance. Just now I went to the website and saw this notice[^]: The short story was a hacker failed to extort money from them and proceeded to delete all/most of the repo and snapshots. I think I cannot sleep tonight! :( They advertised Oracle was one of their customers. I wondered how much Oracle lost.
Why didn't they contact Amazon right away so their account could be temporarily frozen, preventing the malicious people from doing any further damage?
Regards, Nish
Latest article: Using the Microsoft Azure Storage Client Library for C++ Blog: voidnish.wordpress.com
-
The issue is not the cloud. The issue is trusting a single backup location (and I count "the cloud" as such). If you really care about backups, you should have different backup locations. And a cloud backup can still be a good choice for that as long as you still have your own copy somewhere.
In the case of the cloud, different backup locations has to be different cloud providers not just different data centers from the same company. If CodeSpaces had maintained backups with Microsoft, Google, Rackspace, or etc having their Amazon ECS account compromised and nuked would not have brought them down permanently.
Did you ever see history portrayed as an old man with a wise brow and pulseless heart, waging all things in the balance of reason? Is not rather the genius of history like an eternal, imploring maiden, full of fire, with a burning heart and flaming soul, humanly warm and humanly beautiful? --Zachris Topelius Training a telescope on one’s own belly button will only reveal lint. You like that? You go right on staring at it. I prefer looking at galaxies. -- Sarah Hoyt
-
The posting makes no sense to me. A big one is how would you lose the offsite backups? Sounds to me like an insider with a grudge did the deed.
Probably for them "offsite" == in a different amazon data center. :doh:
Did you ever see history portrayed as an old man with a wise brow and pulseless heart, waging all things in the balance of reason? Is not rather the genius of history like an eternal, imploring maiden, full of fire, with a burning heart and flaming soul, humanly warm and humanly beautiful? --Zachris Topelius Training a telescope on one’s own belly button will only reveal lint. You like that? You go right on staring at it. I prefer looking at galaxies. -- Sarah Hoyt
-
Why didn't they contact Amazon right away so their account could be temporarily frozen, preventing the malicious people from doing any further damage?
Regards, Nish
Latest article: Using the Microsoft Azure Storage Client Library for C++ Blog: voidnish.wordpress.com
Behold the power of panic. :sigh:
Did you ever see history portrayed as an old man with a wise brow and pulseless heart, waging all things in the balance of reason? Is not rather the genius of history like an eternal, imploring maiden, full of fire, with a burning heart and flaming soul, humanly warm and humanly beautiful? --Zachris Topelius Training a telescope on one’s own belly button will only reveal lint. You like that? You go right on staring at it. I prefer looking at galaxies. -- Sarah Hoyt
-
Sorry for your data loss. I find it very suspicious that the service can't restore older backups. Going forward, you may want to consider using Visual Studio Online (Basic)[^]. It's free (for up to 5 users) and I've found it to be extremely reliable and very fast. /ravi
My new year resolution: 2048 x 1536 Home | Articles | My .NET bits | Freeware ravib(at)ravib(dot)com
Ravi Bhavnani wrote:
I find it very suspicious that the service can't restore older backups.
You and some others. I don't; if they backup, then chances are that those backups be infected too, or simply invalid without anyone noticing. It wouldn't be much of a ransom if people could simply restore the backup - it wouldn't even be news, but merely a joke in the Soapbox. --edit tx for the link :)
Bastard Programmer from Hell :suss: If you can't read my code, try converting it here[^]
-
I put all my personal source code in private repository hosting. Yesterday night, I was working on a personal project and it failed to check in my code. I thought it was just routine system maintenance. Just now I went to the website and saw this notice[^]: The short story was a hacker failed to extort money from them and proceeded to delete all/most of the repo and snapshots. I think I cannot sleep tonight! :( They advertised Oracle was one of their customers. I wondered how much Oracle lost.
If you are keeping data of any sort (code would be data) on a cloud system then you should keep backups on another cloud company. Just to be clear it isn't sufficient to have another server within the same company, it must be a different company. There are any number of reasons why a single company is insufficient. Some possible reasons 1. They no longer want to be in the cloud business and told you so, 6 months ago, and you ignored it. Today the server is no longer there. Or they no longer want you as a customer. (As a business it might be the case that they told the employee this on the same day you fired that employee.) 2. The location that actually hosts the physical server blew up - literally. (I read a story about a hosted service that had this happen to their hosting company, when the electrical substation that existed solely to support the hosting center literally blew up. It required not only replacing the substation but replacing the electrical conduits into the company.) 3. The feds seize the company for any number of reasons and walk in and shutdown the servers one day.
-
I wonder how "off-site" their backups really were if they could just be deleted from the control panel. I store all of my code in Azure, but I also have everything backed up at home and on my own "off-site" backups. I always maintain 3 copies of everything I can't afford to lose, on seperate media, services and locations, none of which are connected to each other. Unless an asteroid hits the East Coast and obliterates half the United States, it's impossible for me to lose everything like you have.
A guide to posting questions on CodeProject
How to debug small programs
Dave KreskowiakDave Kreskowiak wrote:
Unless an asteroid hits the East Coast and obliterates half the United States, it's impossible for me to lose everything like you have.
Now you're just tempting fate!! :laugh: :laugh:
Quad skating his way through the world since the early 80's... Booger Mobile - My bright green 1964 Ford Falcon - check out the blog here!! | If you feel generous - make a donation to Camp Quality!!
-
I put all my personal source code in private repository hosting. Yesterday night, I was working on a personal project and it failed to check in my code. I thought it was just routine system maintenance. Just now I went to the website and saw this notice[^]: The short story was a hacker failed to extort money from them and proceeded to delete all/most of the repo and snapshots. I think I cannot sleep tonight! :( They advertised Oracle was one of their customers. I wondered how much Oracle lost.
-
Ravi Bhavnani wrote:
I find it very suspicious that the service can't restore older backups.
You and some others. I don't; if they backup, then chances are that those backups be infected too, or simply invalid without anyone noticing. It wouldn't be much of a ransom if people could simply restore the backup - it wouldn't even be news, but merely a joke in the Soapbox. --edit tx for the link :)
Bastard Programmer from Hell :suss: If you can't read my code, try converting it here[^]
Here at work my browser blocks this site, indicating it as Malware. It may be a false positive, but better be safe than sorry.
GOTOs are a bit like wire coat hangers: they tend to breed in the darkness, such that where there once were few, eventually there are many, and the program's architecture collapses beneath them. (Fran Poretto)
