FabSwingers.com
 

FabSwingers.com > Forums > Politics > NHS Ransomware attack

NHS Ransomware attack

Jump to: Newest in thread

 

By (user no longer on site) OP     over a year ago

So I am quite suprised no one has mentioned this, so after years of tory cuts and underinvestment it has finally happened, they did not invest in protecting and upgrading the NHS IT infrastructure and now the people are suffering from a situation which could have been totally avoidable. Do not get me started on other public systems.

So lets be clear this is what we will expect when a government which is for the few and not the many is in power. Cuts to defence, cuts to policing, cuts to public services which leave us weak and vulnerable.

You know the funny thing though is that many people are still going to vote tory, it makes me laugh.

Does anyone wanna play a game of lemmings btw?

Reply privately, Reply in forum +quote or View forums list

 

By *illwill69uMan  over a year ago

moston

It has come as a total shock to the government...

They only had 7 years warning that Microsoft were stopping windows xp updates and that once that happened the system would be vulnerable, and 2 years ago the government refused to pay £5.5 million to Microsoft to extend the security contract on all government machines running xp.

...

...

Anyone notice that the health minister is missing?

...

...

...

Guess he and the rest of the government are busy being strong and stable (or maybe looking for a new door for the stable).

Reply privately, Reply in forum +quote or View forums list

 

By *mmabluTV/TS  over a year ago

upton wirral

Yes the government should take full responsibility for this as there should be a separate funding to protect all information held by the NHS and all government departments.

Corbyn is to stupid to work this out lol

Reply privately, Reply in forum +quote or View forums list

 

By *ercuryMan  over a year ago

Grantham

Do we need to mention here the costs of the failed IT system for the NHS, ordered by the Labour Government in 2002?

Was it way over £10 billion per chance?

Reply privately, Reply in forum +quote or View forums list

 

By *hetalkingstoveMan  over a year ago

London


"Yes the government should take full responsibility for this as there should be a separate funding to protect all information held by the NHS and all government departments.

Corbyn is to stupid to work this out lol"

So you admit there is a government failing but manage to turn this into an attack on Corbyn

Reply privately, Reply in forum +quote or View forums list

 

By (user no longer on site)  over a year ago


"Do we need to mention here the costs of the failed IT system for the NHS, ordered by the Labour Government in 2002?

Was it way over £10 billion per chance?"

You could also point out lots of corporations were targeted too, but it would be easier to blame the government.

Reply privately, Reply in forum +quote or View forums list

 

By (user no longer on site)  over a year ago

The NHS is so ridiculously over funded .. it's an ineffective behemoth that squanders money on generous pay packages for management and outsourcing to costly private Consultancy firms that exacerbate wastage and inefficiency.

They're using a os environment that has lapsed into unsupported relic from the s/w vendor by 2 years!

The NHS is obviously indispensable and hugely invaluable, too many greedy complacent incompetent managers though..

It wasn't a question of how but when really.

Reply privately, Reply in forum +quote or View forums list

 

By *LCCCouple  over a year ago

Cambridge

[Removed by poster at 14/05/17 00:06:56]

Reply privately, Reply in forum +quote or View forums list

 

By *LCCCouple  over a year ago

Cambridge


"Do we need to mention here the costs of the failed IT system for the NHS, ordered by the Labour Government in 2002?

Was it way over £10 billion per chance?"

All governments of all colours fuck up IT infrastructure. It's been going on long it's even ridiculed in Yes Minister!

Reply privately, Reply in forum +quote or View forums list

 

By *VBethTV/TS  over a year ago

Chester

Our government department only moved to Windows 7 when XP was killed off. For some reason all of them refuse to use the latest systems citing lack of proof of stability.

Trouble is that unless you're running with a GCHQ style system with loads of active defence, hackers will be able to get in with enough effort. Let's face it, even on a modern up to date machine, opening one dodgy email link can leave your PC in the same situation the NHS ended up in.

All it would take was one person with access privileges to let it in from the inside too.

Reply privately, Reply in forum +quote or View forums list

 

By (user no longer on site) OP     over a year ago


"The NHS is so ridiculously over funded .. it's an ineffective behemoth that squanders money on generous pay packages for management and outsourcing to costly private Consultancy firms that exacerbate wastage and inefficiency.

They're using a os environment that has lapsed into unsupported relic from the s/w vendor by 2 years!

The NHS is obviously indispensable and hugely invaluable, too many greedy complacent incompetent managers though..

It wasn't a question of how but when really.

"

A lie told by tories, to blame the people, who funds them then, government, who refuses to pay for the upgrades and allow for budget to recruit new staff to sort this out, the tory government. 7 years on a top down restructuring program which wasted billions of pounds. The cuts to public services prove the point, when ever cuts hit the choice is clear, it is too expensive to fix the systems, well congratulations we are unprotected.

Another fact, the ransomware used a exploit which actually affects all current versions of windows not just xp, it was stolen from the nsa, and after it was stolen the fix was only disclosed to microsoft by the US government.

So you tell me, who is to blame? the neo con hawks in Washington, in collusion with the tory party in the UK.

Believe me some people must be a utter mugs to vote tory in the general election, because I guarantee, things will get progressively worse in this sphere and there is nothing they are trying to do stop this, because they are happy for it to continue.

Reply privately, Reply in forum +quote or View forums list

 

By (user no longer on site) OP     over a year ago


"Do we need to mention here the costs of the failed IT system for the NHS, ordered by the Labour Government in 2002?

Was it way over £10 billion per chance?"

costs to upgrade a broken system left to them by the tories in 1997. what do you expect.

everytime the tories get in power they cut, to hell with the consequences, they are ideologically driven to be tight fisted.

Reply privately, Reply in forum +quote or View forums list

 

By *bi_scotlandTV/TS  over a year ago

Glasgow


"So you tell me, who is to blame? the neo con hawks in Washington, in collusion with the tory party in the UK."

Eh?

Reply privately, Reply in forum +quote or View forums list

 

By *ercuryMan  over a year ago

Grantham


"Do we need to mention here the costs of the failed IT system for the NHS, ordered by the Labour Government in 2002?

Was it way over £10 billion per chance?

costs to upgrade a broken system left to them by the tories in 1997. what do you expect.

everytime the tories get in power they cut, to hell with the consequences, they are ideologically driven to be tight fisted. "

Funnily enough, the White Paper on the NHS published by the Labour Goverment in 1997 doesn't say that at all.

NHS Digital were advised by Microsoft in March that Windows XP was vulnerable to attack, and NHS Digital advised Trusts in April about the situation.

The fact that over 100 countries were targeted, and involved many organisations, shows that this was a global problem.

I suppose that it fits your agenda to blame the Goverment, whereas its really the criminals that you should be blaming.

Reply privately, Reply in forum +quote or View forums list

 

By (user no longer on site) OP     over a year ago


"Do we need to mention here the costs of the failed IT system for the NHS, ordered by the Labour Government in 2002?

Was it way over £10 billion per chance?

costs to upgrade a broken system left to them by the tories in 1997. what do you expect.

everytime the tories get in power they cut, to hell with the consequences, they are ideologically driven to be tight fisted.

Funnily enough, the White Paper on the NHS published by the Labour Goverment in 1997 doesn't say that at all.

NHS Digital were advised by Microsoft in March that Windows XP was vulnerable to attack, and NHS Digital advised Trusts in April about the situation.

The fact that over 100 countries were targeted, and involved many organisations, shows that this was a global problem.

I suppose that it fits your agenda to blame the Goverment, whereas its really the criminals that you should be blaming."

No agenda just the truth, oh by the way the exploit which was used was as part of the ransomware the criminals repurposed was developed by the NSA. The NSA only deemed it important to tell microsoft about the vulnerabilities to all windows systems when the cache of exploits was stolen by the shadow brokers which I may add was annoyed with donald trump for not being their bessy friend.

So, who are the real criminals? The criminals who creating the ransomware? The NSA for developing the malware and keeping it secret since 2013, the patch? which came way too late in march 2017 and the advisory to nhs digital in April which is not sufficient time to update all the systems in the NHS, the cost alone of getting a qualified team of IT security staff too sort this is high, and something your ordinary tech in your local PC world cannot do.

Yes it is a global problem, affecting businesses, but businesses are not the NHS which holds all our medical data. Most of the victims are in countries which cannot afford to upgrade their systems, and nissan, i could go on about the UK car industry and the lack investment in cyber security till the cows come home,

But you stay in your safe place, your little bubble, thinking the world is fine,

Reply privately, Reply in forum +quote or View forums list

 

By (user no longer on site)  over a year ago


"Do we need to mention here the costs of the failed IT system for the NHS, ordered by the Labour Government in 2002?

Was it way over £10 billion per chance?

costs to upgrade a broken system left to them by the tories in 1997. what do you expect.

everytime the tories get in power they cut, to hell with the consequences, they are ideologically driven to be tight fisted.

Funnily enough, the White Paper on the NHS published by the Labour Goverment in 1997 doesn't say that at all.

NHS Digital were advised by Microsoft in March that Windows XP was vulnerable to attack, and NHS Digital advised Trusts in April about the situation.

The fact that over 100 countries were targeted, and involved many organisations, shows that this was a global problem.

I suppose that it fits your agenda to blame the Goverment, whereas its really the criminals that you should be blaming."

How absurd to say the government has no blame in this.The only agenda i see here is yours my friend and its clear as water.

Reply privately, Reply in forum +quote or View forums list

 

By (user no longer on site)  over a year ago

OP....if you had bothered to check a thread WAS opened on this two days ago....when it was news.

There have been several inputs from people in the NHS...who are in the know.

Rather than just making cheap political shots.

There were companies and organisations in over 100 countries affected. Some of these telecom giants (Telefonica in Spain amongst them).

When the fuss died down it turns out just 25% of trusts were affected so 75% were not. Currently 97% of NHS is running normally.

So unfortunately for your left wing agenda it wasn't a national/government problem. You may wish to blame individual trust managers etc? Because clearly individual decisions, at trust level, are to blame.

I've just checked with a friend who works at my local NHS trust. They haven't used XP for years. However, as a matter of IT policy they do NOT move to the newest OS instantly as it always takes a year or two to become stable.

Some of us remember when windows 98 came out. It was well known for being windows 95 with added glitches! I like many, switched to it quickly...three weeks later I went back to the more stable 95 version.

Reply privately, Reply in forum +quote or View forums list

 

By *eepndarkMan  over a year ago

Cardiff


"So I am quite suprised no one has mentioned this, so after years of tory cuts and underinvestment it has finally happened, they did not invest in protecting and upgrading the NHS IT infrastructure and now the people are suffering from a situation which could have been totally avoidable. Do not get me started on other public systems.

So lets be clear this is what we will expect when a government which is for the few and not the many is in power. Cuts to defence, cuts to policing, cuts to public services which leave us weak and vulnerable.

You know the funny thing though is that many people are still going to vote tory, it makes me laugh.

Does anyone wanna play a game of lemmings btw?

"

Crying laughing but more crying as working class, broke, indebted slave to their jobs people vote Tory. Good luck to them. When their sick and can't afford meds tough shit, when they have to watch relatives die tough shit, when their job goes due to automation tough shit. When their children are in poorly funded secondary schools because the money has gone to grammers, super tough shit as that consigns the next generation to a life of debt and a poor standard of living called survival.Maybe they like Trump, well he has wiped away the food safety laws protecting school meals, yes folks schools can now be sold any shitty "foods" to feed the children, that will happen here to save money.

When it is the time to take a stand they are sucking up the tripe served up by the ruling classes.

Young people get out and vote!

Muppets

Reply privately, Reply in forum +quote or View forums list

 

By *eepndarkMan  over a year ago

Cardiff


"OP....if you had bothered to check a thread WAS opened on this two days ago....when it was news.

There have been several inputs from people in the NHS...who are in the know.

Rather than just making cheap political shots.

There were companies and organisations in over 100 countries affected. Some of these telecom giants (Telefonica in Spain amongst them).

When the fuss died down it turns out just 25% of trusts were affected so 75% were not. Currently 97% of NHS is running normally.

So unfortunately for your left wing agenda it wasn't a national/government problem. You may wish to blame individual trust managers etc? Because clearly individual decisions, at trust level, are to blame.

I've just checked with a friend who works at my local NHS trust. They haven't used XP for years. However, as a matter of IT policy they do NOT move to the newest OS instantly as it always takes a year or two to become stable.

Some of us remember when windows 98 came out. It was well known for being windows 95 with added glitches! I like many, switched to it quickly...three weeks later I went back to the more stable 95 version."

Windows 7 is a stable desktop platform given its time in service. Left wing? It's a shame factions are ruling the agenda. People seem to forget lives are at stake here and the squabbling is not productive.

Reply privately, Reply in forum +quote or View forums list

 

By (user no longer on site)  over a year ago


"So I am quite suprised no one has mentioned this, so after years of tory cuts and underinvestment it has finally happened, they did not invest in protecting and upgrading the NHS IT infrastructure and now the people are suffering from a situation which could have been totally avoidable. Do not get me started on other public systems.

So lets be clear this is what we will expect when a government which is for the few and not the many is in power. Cuts to defence, cuts to policing, cuts to public services which leave us weak and vulnerable.

You know the funny thing though is that many people are still going to vote tory, it makes me laugh.

Does anyone wanna play a game of lemmings btw?

Crying laughing but more crying as working class, broke, indebted slave to their jobs people vote Tory. Good luck to them. When their sick and can't afford meds tough shit, when they have to watch relatives die tough shit, when their job goes due to automation tough shit. When their children are in poorly funded secondary schools because the money has gone to grammers, super tough shit as that consigns the next generation to a life of debt and a poor standard of living called survival.Maybe they like Trump, well he has wiped away the food safety laws protecting school meals, yes folks schools can now be sold any shitty "foods" to feed the children, that will happen here to save money.

When it is the time to take a stand they are sucking up the tripe served up by the ruling classes.

Young people get out and vote!

Muppets"

Absolutely! The youth should get out and vote.However we have an ageing demographic. The tories want grandads vote and the youth can go fuck themselves because grandad knows best.

Reply privately, Reply in forum +quote or View forums list

 

By (user no longer on site)  over a year ago

There are lots of grandads in Bournemouth I believe?

Reply privately, Reply in forum +quote or View forums list

 

By (user no longer on site)  over a year ago


"There are lots of grandads in Bournemouth I believe?"
Yes its tory and ukip territories.The greens will beat labour in my area but will be far behind the tory vote.Hopefully the kippers collapse.

Reply privately, Reply in forum +quote or View forums list

 

By *oi_LucyCouple  over a year ago

Barbados


"OP....if you had bothered to check a thread WAS opened on this two days ago....when it was news.

There have been several inputs from people in the NHS...who are in the know.

Rather than just making cheap political shots.

There were companies and organisations in over 100 countries affected. Some of these telecom giants (Telefonica in Spain amongst them).

When the fuss died down it turns out just 25% of trusts were affected so 75% were not. Currently 97% of NHS is running normally.

So unfortunately for your left wing agenda it wasn't a national/government problem. You may wish to blame individual trust managers etc? Because clearly individual decisions, at trust level, are to blame.

I've just checked with a friend who works at my local NHS trust. They haven't used XP for years. However, as a matter of IT policy they do NOT move to the newest OS instantly as it always takes a year or two to become stable.

Some of us remember when windows 98 came out. It was well known for being windows 95 with added glitches! I like many, switched to it quickly...three weeks later I went back to the more stable 95 version."

Having met the OP in real life and chatting to him on this topic before, I'd say he is way more knowledgable than the average person. And working in IT and having had a job of securing network and systems myself, I feel I can say that with some authority.

However this is a much bigger picture than just the NHS. The NHS wasn't 'attacked' or 'targeted' as much of the news is leading with in their headlines. The NHS just happened to be one of many services and organisations around the country that got affected by this.

As the OP points out, this was a worm that used an exploit developed by the US intelligence services and was then used to deliver an existing widely used cryptolocker payload.

Could the NHS have prevented this? Yes, perhaps they could have. However no system is 100% secure. Could they have mitigated the effects of an incident like this better? Yes, they probably could. Will this happen again? Yes, it will.

The question is more *why* this came about. This was a state sponsored exploit, that was stolen from them and then used by a 3rd party. It was an exploit that affected both legacy *and* modern build of Windows. So, just saying 'they were out of support and hadn't upgraded' is not necessarily the cause of this. Whilst it is certainly not great that they are still running such old and unsupported systems, it is not the cause of this specific issue.

The bigger questions we should be asking, is how does this fit into the overall landscape and mindset of information security these days? We have a PM who is overseeing a massive dragnet-style collection of citizen data. As home sec she was the proponent of the 'snoopers charter' and as PM she has waved through the IP Bill and the DE bill, both of which involve mass collection of personal information of its citizens. We are supposed to be convinced that the government can keep this information safe, despite a list of agencies as long as your arm will have access to this data.

I've mentioned it before, and I'll post it again... here is the list of agencies that will have the clearance to access all your internet history data:

Metropolitan Police Service

City of London Police

Police forces maintained under section 2 of the Police Act 1996

Police Service of Scotland

Police Service of Northern Ireland

British Transport Police

Ministry of Defence Police

Royal Navy Police

Royal Military Police

Royal Air Force Police

Security Service

Secret Intelligence Service

GCHQ

Ministry of Defence

Department of Health

Home Office

Ministry of Justice

National Crime Agency

HM Revenue & Customs

Department for Transport

Department for Work and Pensions

NHS trusts and foundation trusts in England that provide ambulance services

Common Services Agency for the Scottish Health Service

Competition and Markets Authority

Criminal Cases Review Commission

Department for Communities in Northern Ireland

Department for the Economy in Northern Ireland

Department of Justice in Northern Ireland

Financial Conduct Authority

Fire and rescue authorities under the Fire and Rescue Services Act 2004

Food Standards Agency

Food Standards Scotland

Gambling Commission

Gangmasters and Labour Abuse Authority

Health and Safety Executive

Independent Police Complaints Commissioner

Information Commissioner

NHS Business Services Authority

Northern Ireland Ambulance Service Health and Social Care Trust

Northern Ireland Fire and Rescue Service Board

Northern Ireland Health and Social Care Regional Business Services Organisation

Office of Communications

Office of the Police Ombudsman for Northern Ireland

Police Investigations and Review Commissioner

Scottish Ambulance Service Board

Scottish Criminal Cases Review Commission

Serious Fraud Office

Welsh Ambulance Services National Health Service Trust

You will see the NHS appear on that list in multiple forms. So any ONE of those agencies could be affected by a vulnerability such as what has just happened. And this is not even thinking about either criminal or state actors trying to get this data.

Oh and to top it all off, we have politicians around the globe advocating for the requirement for 'back doors' in the security of online systems. Time and time again we have seen these well-meant back doors being used by unauthorised actors. Either by those with powers overstepping the mark (Met Police on countless examples) or by the back doors being discovered, leaked, or otherwise compromised by others. And sure as hell, if one person has discovered it, you can be sure others have too.

-Matt

Reply privately, Reply in forum +quote or View forums list

 

By (user no longer on site) OP     over a year ago


"OP....if you had bothered to check a thread WAS opened on this two days ago....when it was news.

There have been several inputs from people in the NHS...who are in the know.

Rather than just making cheap political shots.

There were companies and organisations in over 100 countries affected. Some of these telecom giants (Telefonica in Spain amongst them).

When the fuss died down it turns out just 25% of trusts were affected so 75% were not. Currently 97% of NHS is running normally.

So unfortunately for your left wing agenda it wasn't a national/government problem. You may wish to blame individual trust managers etc? Because clearly individual decisions, at trust level, are to blame.

I've just checked with a friend who works at my local NHS trust. They haven't used XP for years. However, as a matter of IT policy they do NOT move to the newest OS instantly as it always takes a year or two to become stable.

Some of us remember when windows 98 came out. It was well known for being windows 95 with added glitches! I like many, switched to it quickly...three weeks later I went back to the more stable 95 version."

The stability issue is a stupid remnant of ancient IT policy dogma which fails to support modern practices, windows systems are far more stable now than what they were 23 years ago. even so virtulisation can help with testing patch stability now.

Also the actual exploit does not just effect windows xp, the nsa exploit affects all windows versions, just to clear that one up. They are a set of a family of exploits, but you would not know that.

Reply privately, Reply in forum +quote or View forums list

 

By *oi_LucyCouple  over a year ago

Barbados

Oh, and anyone who paints this as a left-wing vs right-wing issue is a fucking idiot.

-Matt

Reply privately, Reply in forum +quote or View forums list

 

By (user no longer on site)  over a year ago


"Oh, and anyone who paints this as a left-wing vs right-wing issue is a fucking idiot.

-Matt"

On this I completely agree with you

Reply privately, Reply in forum +quote or View forums list

 

By (user no longer on site)  over a year ago

I believe lots of other huge businesses were affected by this. Why?

Reply privately, Reply in forum +quote or View forums list

 

By (user no longer on site)  over a year ago


"OP....if you had bothered to check a thread WAS opened on this two days ago....when it was news.

There have been several inputs from people in the NHS...who are in the know.

Rather than just making cheap political shots.

There were companies and organisations in over 100 countries affected. Some of these telecom giants (Telefonica in Spain amongst them).

When the fuss died down it turns out just 25% of trusts were affected so 75% were not. Currently 97% of NHS is running normally.

So unfortunately for your left wing agenda it wasn't a national/government problem. You may wish to blame individual trust managers etc? Because clearly individual decisions, at trust level, are to blame.

I've just checked with a friend who works at my local NHS trust. They haven't used XP for years. However, as a matter of IT policy they do NOT move to the newest OS instantly as it always takes a year or two to become stable.

Some of us remember when windows 98 came out. It was well known for being windows 95 with added glitches! I like many, switched to it quickly...three weeks later I went back to the more stable 95 version.

The stability issue is a stupid remnant of ancient IT policy dogma which fails to support modern practices, windows systems are far more stable now than what they were 23 years ago. even so virtulisation can help with testing patch stability now.

Also the actual exploit does not just effect windows xp, the nsa exploit affects all windows versions, just to clear that one up. They are a set of a family of exploits, but you would not know that.

"

Actually I would know this.

It wasn't me who brought up the XP red herring. (It was the second poster).

The very point I was making is that this isn't an NHS or a political problem in this country. And my point was that it shouldn't be made into such.

Reply privately, Reply in forum +quote or View forums list

 

By *oi_LucyCouple  over a year ago

Barbados


"The very point I was making is that this isn't an NHS or a political problem in this country. And my point was that it shouldn't be made into such."

It is not a problem that affects only the NHS, but it is certainly a political issue. The current government are very much trying to weaken the security of networked services by trying to push for mandatory back doors to systems. A leak of the knowledge of those back doors would lead to an almost identical incident.

That and them trying to build massive centralised stores of communication records (personal information) means that this is very much a political problem in this country and is only going to get worse.

-Matt

Reply privately, Reply in forum +quote or View forums list

 

By *oi_LucyCouple  over a year ago

Barbados


"I believe lots of other huge businesses were affected by this. Why?"

They were affected due to the fact the patch that Microsoft released to fix this vulnerability was only issued 2 months before the incident took place and a lot of systems are not updated that often. Whilst it is best practice that patches are applied regularly and in a timely manner, often that is not practical.

The vulnerability used to exploit these systems affected pretty much all versions of Microsoft Windows released in the past decade.

-Matt

Reply privately, Reply in forum +quote or View forums list

 

By (user no longer on site)  over a year ago


"The very point I was making is that this isn't an NHS or a political problem in this country. And my point was that it shouldn't be made into such.

It is not a problem that affects only the NHS, but it is certainly a political issue. The current government are very much trying to weaken the security of networked services by trying to push for mandatory back doors to systems. A leak of the knowledge of those back doors would lead to an almost identical incident.

That and them trying to build massive centralised stores of communication records (personal information) means that this is very much a political problem in this country and is only going to get worse.

-Matt"

That IS a political issue...no argument from me. But totally separate to the current worldwide cyber attack. Tho apparently there is a simple kill code for this particular attack.

Reply privately, Reply in forum +quote or View forums list

 

By (user no longer on site)  over a year ago

Every critic of the NHS I've ever known was miraculously changed to a supporter of the NHS by a simple process of becoming ill!!

At that point there whole philosophy of "unsustainable" became "sustainable" but it needs funding correctly.

Reply privately, Reply in forum +quote or View forums list

 

By (user no longer on site)  over a year ago

Theres nothing like a life threatening illness for changing people opinions.

Its like all these anti science flat earth homeopathic wallys soon start believing in "science" and "medicine" once blood starts oozing from the eyeballs

Reply privately, Reply in forum +quote or View forums list

 

By (user no longer on site)  over a year ago

All these cunts banging on about there bupa policies will soon sing a different tune when there insurance suddenly doesn't cover their cancer or a their "pre existing" illness springs up!.

Sorry your £35 a month no longer covers you. Goodbye

Reply privately, Reply in forum +quote or View forums list

 

By *oi_LucyCouple  over a year ago

Barbados


"The very point I was making is that this isn't an NHS or a political problem in this country. And my point was that it shouldn't be made into such.

It is not a problem that affects only the NHS, but it is certainly a political issue. The current government are very much trying to weaken the security of networked services by trying to push for mandatory back doors to systems. A leak of the knowledge of those back doors would lead to an almost identical incident.

That and them trying to build massive centralised stores of communication records (personal information) means that this is very much a political problem in this country and is only going to get worse.

-Matt

That IS a political issue...no argument from me. But totally separate to the current worldwide cyber attack. Tho apparently there is a simple kill code for this particular attack."

There was a 'kill switch' for the initial version, correct. There is likely to be an imminent new version without the kill switch.

And yes it is related to the current incident as the current incident shows just how vulnerable some of these systems are, and how the policies of the government will just make it worse.

-Matt

Reply privately, Reply in forum +quote or View forums list

 

By (user no longer on site)  over a year ago

the government seems to be a dog chasing it's own tail as far as IT is concerned .... they are heavily into the talent in the sector being completely market driven but as a result the government can't afford the money demanded for the talents expertise and it leaves the government vulnerable ... how ironic

Reply privately, Reply in forum +quote or View forums list

 

By *oi_LucyCouple  over a year ago

Barbados


"the government seems to be a dog chasing it's own tail as far as IT is concerned .... they are heavily into the talent in the sector being completely market driven but as a result the government can't afford the money demanded for the talents expertise and it leaves the government vulnerable ... how ironic"

If it not about not being able to afford the 'talent' as you put it (makes me sound like a porn star ), but more that they just fundamentally don't understand what they are doing with technology and are pushing through policies that are actively weakening our IT security, despite opposition from all those who do know what they are talking about.

-Matt

Reply privately, Reply in forum +quote or View forums list

 

By (user no longer on site)  over a year ago

[Removed by poster at 15/05/17 13:10:35]

Reply privately, Reply in forum +quote or View forums list

 

By (user no longer on site)  over a year ago

Are they sure they just cant press ctrl alt delete to get the task manager and end the process? It can happened to anyone and it is common when you view porn to get them or as someone said, one of the staff clicked on a phishing link they shouldnt have clicked on in the email.

Reply privately, Reply in forum +quote or View forums list

 

By (user no longer on site)  over a year ago


"the government seems to be a dog chasing it's own tail as far as IT is concerned .... they are heavily into the talent in the sector being completely market driven but as a result the government can't afford the money demanded for the talents expertise and it leaves the government vulnerable ... how ironic

If it not about not being able to afford the 'talent' as you put it (makes me sound like a porn star ), but more that they just fundamentally don't understand what they are doing with technology and are pushing through policies that are actively weakening our IT security, despite opposition from all those who do know what they are talking about.

-Matt"

that's a point aside from the one i have made ... equally valid though

Reply privately, Reply in forum +quote or View forums list

 

By *estless nativeMan  over a year ago

near Glasgow

A pal of mine who works in the NHS told me this morning that theres going to be a major upgrade of the NHS I.T. systems.

He expects his ZX spectrum to be replaced with Commodore soon

Reply privately, Reply in forum +quote or View forums list

 

By (user no longer on site)  over a year ago


"A pal of mine who works in the NHS told me this morning that theres going to be a major upgrade of the NHS I.T. systems.

He expects his ZX spectrum to be replaced with Commodore soon "

64kb for the win.

Reply privately, Reply in forum +quote or View forums list

 

By (user no longer on site)  over a year ago

A simple patch update would have stopped this, and trust me, no, there is no "simple kill switch"

Reply privately, Reply in forum +quote or View forums list

 

By (user no longer on site)  over a year ago

Well well.. Jeremy Hunt finally popped up to make a comment today, the attack was on Friday.. late.. but better late than never

Reply privately, Reply in forum +quote or View forums list

 

By *oi_LucyCouple  over a year ago

Barbados


"A simple patch update would have stopped this, and trust me, no, there is no "simple kill switch" "

If you've ever dealt with IT in large organisations you'll know there is no such thing as a 'simple patch'. Whilst the patch itself might be simple, the deployment is rarely simple. Where things get especially complicated is when you have computers connected to things like medical imaging devices that might be on a specific software version and may be under specific warranty by a 3rd party vendor.

-Matt

Reply privately, Reply in forum +quote or View forums list

 

By *oi_LucyCouple  over a year ago

Barbados


"A simple patch update would have stopped this, and trust me, no, there is no "simple kill switch" "

Actually in this case there was. The worm checked the existence of a particular domain name, and connect to a website at the address. A pretty simple kill switch. Hence the guy lauded as a hero who just registered the domain name. For some reason the creators didn't register the domain name itself.

That said a new version will no doubt surface imminently with the kill switch disabled.

-Matt

Reply privately, Reply in forum +quote or View forums list

 

By (user no longer on site)  over a year ago

Well, I work in IT security, so I do know about these things and deploying patches is simple if you have the right tools that deploy patches for you, and yes there are tools out there and the reason I stated there was no "kill switch" is because Microsoft said it themselves "the kill switch has been disabled on this occasion"

Reply privately, Reply in forum +quote or View forums list

 

By (user no longer on site)  over a year ago

Yes, some of those ransom wear you can disable manually.

Reply privately, Reply in forum +quote or View forums list

 

By *oi_LucyCouple  over a year ago

Barbados


"Well, I work in IT security, so I do know about these things and deploying patches is simple if you have the right tools that deploy patches for you, and yes there are tools out there and the reason I stated there was no "kill switch" is because Microsoft said it themselves "the kill switch has been disabled on this occasion" "

Yes, it is easy if you:

a) have those tools

b) have a more homogenous setup and don't have 3rd party equipment to deal with

Considering last issue I had integrating with part of the Kerberos setup within the NHS was due to 3 of the PDCs we were contacting having clocks that had drifted out by more than 5 minutes from each other... I think you might overestimate the staffing the NHS and DH have to deal with things like this.

-Matt

Reply privately, Reply in forum +quote or View forums list

 

By *oole2010Couple  over a year ago

southampto


"It has come as a total shock to the government...

They only had 7 years warning that Microsoft were stopping windows xp updates and that once that happened the system would be vulnerable, and 2 years ago the government refused to pay £5.5 million to Microsoft to extend the security contract on all government machines running xp.

...

...

Anyone notice that the health minister is missing?

...

...

...

Guess he and the rest of the government are busy being strong and stable (or maybe looking for a new door for the stable). "

Guess you missed the bit where its the responsibility of the local trusts to implement this perhaps because they have no money left after they have paid all the managers that are not required under the nhs but just to create employment under labour governments

Reply privately, Reply in forum +quote or View forums list

  

By (user no longer on site)  over a year ago


"So I am quite suprised no one has mentioned this, so after years of tory cuts and underinvestment it has finally happened, they did not invest in protecting and upgrading the NHS IT infrastructure and now the people are suffering from a situation which could have been totally avoidable. Do not get me started on other public systems.

So lets be clear this is what we will expect when a government which is for the few and not the many is in power. Cuts to defence, cuts to policing, cuts to public services which leave us weak and vulnerable.

You know the funny thing though is that many people are still going to vote tory, it makes me laugh.

Does anyone wanna play a game of lemmings btw?

"

Worst thing so far to happen to the nhs.. (apart from jeremy hunt)

Reply privately, Reply in forum +quote or View forums list

» Add a new message to this topic

0.0624

0