Windows 2008? Almost impossible to stop people from hacking if they make it past

Report problem with this ad

May 15, 2019
7:25:33am

CougarAndMerlin All-American

your firewall. Having just one in your domain can compromise the whole thing even if the rest of the servers are 2012+.

Report problem with this ad

CougarAndMerlin

Bio page: CougarAndMerlin
Joined: Nov 18, 2012
Last login: Apr 29, 2024
Total posts: 4,138 (14 FO)

Report problem with this ad

Messages

Author

Time

No one died or got divorced, but the last 80 hours have been awful.

Belboz

5/14/19 12:35am

What kind of IT work do you do?

dYrtbYkerYder

5/14/19 12:47am

Systems guy.

Belboz

5/14/19 2:26am

If your company is that short staffed, time for a new job

BeyondTheMark

5/14/19 5:09am

This. My lil' brother is in computers, doesn't have a degree but has lots of certifications, and he just switched jobs

Smack'sWife

5/14/19 6:24am

I've left this company twice in the last 20 years only to return.

Belboz

5/15/19 2:23am

We lost 800 servers on Friday night and have to rebuild

Belboz

5/15/19 2:09am

Was there a disaster?

kapcreations

5/14/19 6:21am

Exactly, if this is the norm and not a disaster he needs to find a new company

fredy

5/14/19 6:40am

I think he mentioned a last week they were dealing with a massive virus

Duke Silver

5/14/19 8:08am

Ransomeware. I'm months shy of 50 and worked my whole career in IT

Belboz

5/15/19 2:17am

Did it move laterally because of patching or credentials?

kapcreations

5/15/19 6:14am

How much did the ransomware guys want for decrypting those servers?

Veracruz

5/15/19 6:53am

That's a cycle you never want to enter. Better to take the brunt and restore

VACOUGFAN

5/15/19 8:45am

Yeah, don't even entertain the thought.

Squeegee

5/15/19 8:55am

I know of two different companies who paid, one $2500 the other $50,000.

Veracruz

5/16/19 10:29am

I never cared enough to find out. i'm sure it would have been a payment plan

Belboz

5/15/19 11:46am

Windows 2008? Almost impossible to stop people from hacking if they make it past

CougarAndMerlin

5/15/19 7:25am

We still had about 200 2008.

Belboz

5/15/19 11:48am

well, we did have a good percentage of 2008 unaffected. all 2012 were killed.

Belboz

5/15/19 3:16pm

As soon as a domain admin hash is pulled from a 2008, all other servers

CougarAndMerlin

5/15/19 3:24pm

lol. yeah, reboot a server just like that...

Belboz

5/15/19 5:15pm

How is that specific to 2008?

kapcreations

5/15/19 5:34pm

2008 is susceptible to extracting password hashes out of memory.

CougarAndMerlin

5/15/19 10:41pm

AND despite having regular PCI audits, our domain admins list was out of control

Belboz

5/15/19 11:15pm

Yucky

Posting on CougarBoard