Hacker News new | ask | show | jobs
by qikInNdOutReply 1212 days ago
If its really important. Airgap. Or VM-Wrapped with restore points.

I completely understand that somebody does not want to upgrade into the warp-abyss-abomination of modern windows, especially if huge expenses software was written once, that needs backwards compatability or contains sensitive data. You can not use windows if you work for anything with sensitive data.

In todays world the legacy is the good stuff. Just needs protection.

3 comments

It doesn't look like Oakland would have the IT people, time and skills to deploy and maintain a VM-wrapped infrastructure - which has all the same issues with needing to keep it up to date; e.g. I know people for whom this VMWare ESXi attack https://www.crn.com/news/security/vmware-esxi-ransomware-att... managed to ransom-encrypt both their main virtualization environment and also the backup one.
An airgapped system is one that's basically unusable because you can't communicate with other systems.
Can't help but think back to my youth where nearly every system was airgapped, but were plenty usable regardless.
A system can be more than one computer, i.e. mainframe. Airgapped systems can include multiple computers that are disconnected from external networks. They can be very useful for specialized applications.
I witnessed a ransomware attack where somebody in operations had a SMB share on their desktop to the backend storage for the VMWare ESXi cluster. So the ransomware was able to encrypt many of the vdisks.