OT Ransomware for everybody and, yes, Mac users, that includes you.

http://semiengineering.com/the-evolv...omware-threat/

https://www.trendmicro.com/vinfo/us/...eports/roundup
--

Regards,

Eric Stevens

In article , Eric Stevens
wrote:

http://semiengineering.com/the-evolv...omware-threat/


https://www.trendmicro.com/vinfo/us/...is/threat-repo
rts/roundup

complete non-issue for those with a good backup strategy, regardless of
platform.

On 10/03/2017 20:14, nospam wrote:
In article , Eric Stevens
wrote:

http://semiengineering.com/the-evolv...omware-threat/


https://www.trendmicro.com/vinfo/us/...is/threat-repo
rts/roundup

complete non-issue for those with a good backup strategy, regardless of
platform.

I seem to recall reading that simply using Time Machine, which is
physically connected to my iMac, will be inadequate protection against a
ransomware attack.

Is that right?

In article , David B.
wrote:


complete non-issue for those with a good backup strategy, regardless of
platform.

I seem to recall reading that simply using Time Machine, which is
physically connected to my iMac, will be inadequate protection against a
ransomware attack.

Is that right?

no it's not, but if you want to be safer, put it on the network.

On Sat, 11 Mar 2017 12:47:49 -0500, nospam
wrote:

In article , David B.
wrote:


complete non-issue for those with a good backup strategy, regardless of
platform.

I seem to recall reading that simply using Time Machine, which is
physically connected to my iMac, will be inadequate protection against a
ransomware attack.

Is that right?

no it's not, but if you want to be safer, put it on the network.

As you know, I'm not a Mac user and I know almost nothing about how
time machine works. But can you tell me how in its normal installation
Time Machine is protected from and protects from Denial of Service
attacks?
--

Regards,

Eric Stevens

In article , Eric Stevens
wrote:


complete non-issue for those with a good backup strategy, regardless of
platform.

I seem to recall reading that simply using Time Machine, which is
physically connected to my iMac, will be inadequate protection against a
ransomware attack.

Is that right?

no it's not, but if you want to be safer, put it on the network.

As you know, I'm not a Mac user and I know almost nothing about how
time machine works.

then why did you start a thread about mac ransomware?

But can you tell me how in its normal installation
Time Machine is protected from and protects from Denial of Service
attacks?

dos attacks aren't the issue.

time machine can use a directly attached drive or a network drive.

for the former, the drive can be unmounted when not needed even if it
remains physically connected. for the latter, it's only mounted when a
backup is taking place.

in the unlikely event malware hits, the malware would need to know
there is an unmounted time machine drive, find it, mount it and then
attack it.

while it's theoretically possible for that to happen, the chances are
for all intents, zero. it's also possible a meteor will hit your house,
and the chances for that too is for all intents, zero.

malware authors are not going to bother with edge cases such as that
when what they're doing already has billions of potential targets, most
of whom do not have any backup at all. it's far too much work for very
little gain.

it's much more likely that the hard drive itself will fail or a buggy
app corrupts the data or some other data loss, versus ransomware to
occur, yet for some reason, people get all freaked out about ransomware
and don't do *anything* to cover for the rest.

On 2017-03-11 21:08:57 +0000, Eric Stevens said:

On Sat, 11 Mar 2017 12:47:49 -0500, nospam
wrote:
In article , David B.
wrote:


complete non-issue for those with a good backup strategy, regardless of
platform.

I seem to recall reading that simply using Time Machine, which is
physically connected to my iMac, will be inadequate protection against a
ransomware attack.

Is that right?

no it's not, but if you want to be safer, put it on the network.

As you know, I'm not a Mac user and I know almost nothing about how
time machine works. But can you tell me how in its normal installation
Time Machine is protected from and protects from Denial of Service
attacks?

The first clue as to how "Time Machine" works to backup all, or
selected files and folders on a Mac lies in its name.

After set up and initial back up, it will run at selected time
intervals to run a back-up/file update which is accessible for various
levels of recovery in date and time slices. These "time slices" can be
weekly, daily, but most commonly hourly, and occasionally a back-up on
demand. "Time Machine" keeps hourly backups of files for the previous
24 hours, then a single daily backup of your files for each of the last
30 days, and then weekly backups until such point as the backup disk
becomes full and TimeMachine needs to remove the oldest backups to make
space for new ones.

If you don't care to make hourly back-ups and prefer to isolate your
back-up drive between back-ups, you can always connect the drive to the
computer and make an on demand back-up, and then disconnect. This needs
a good amount of discipline to keep up, as doing things that way can be
a royal PIA, and is subject to lapses.

Using this method limits an hourly back-up to a few Mb to multiple GB.
This means that once the damage or contamination event is identified,
recovery of files, damaged or otherwise contaminated can be easily
located.

So each recovery can be made back to a known clean back-up which is
going to be isolated from a contamination event.

--
Regards,

Savageduck

On 2017-03-10 15:14, nospam wrote:
In article , Eric Stevens
wrote:

http://semiengineering.com/the-evolv...omware-threat/


https://www.trendmicro.com/vinfo/us/...is/threat-repo
rts/roundup

complete non-issue for those with a good backup strategy, regardless of
platform.

+1


--
"If war is God's way of teaching Americans geography, then
recession is His way of teaching everyone a little economics."
..Raj Patel, The Value of Nothing.

On 2017-03-10 20:08:20 +0000, Eric Stevens said:

http://semiengineering.com/the-evolv...omware-threat/

https://www.trendmicro.com/vinfo/us/...eports/roundup

The

solution is simple; DON'T USE TORRENTS!
--
Regards,

Savageduck

In article 2017031012423045495-savageduck1@REMOVESPAMmecom,
Savageduck wrote:


http://semiengineering.com/the-evolv...omware-threat/

https://www.trendmicro.com/vinfo/us/...ysis/threat-re
ports/roundup

The solution is simple; DON'T USE TORRENTS!

torrents isn't the only vector for ransomware or malware.

people get freaked out about ransomware for some reason, even though a
hard drive failure is more likely to occur or a user ****-up, such as
deleting the wrong document by mistake.

the proper solution is have up to date backups, which will cover *any*
disaster

if ransomware does hit, there's also a bit of a thrill in telling the
scumbags to **** off and that you won't be paying *anything*.