Technology

59605 readers

3434 users here now

This is a most excellent place for technology news and articles.

Our Rules

Follow the lemmy.world rules.
Only tech related content.
Be excellent to each another!
Mod approved content bots can post up to 10 articles per day.
Threads asking for personal tech support may be deleted.
Politics threads may be removed.
No memes allowed as posts, OK to post as comments.
Only approved bots from the list below, to ask if your bot can be added please contact us.
Check for duplicates before posting, duplicates may be removed

Approved Bots

founded 1 year ago

MODERATORS

125

A tale of 2 casino ransomware attacks: One paid out, one did not - What can be learned from MGM's and Caesars' infosec moves (www.theregister.com)

submitted 10 months ago by L4s@lemmy.world to c/technology@lemmy.world

14 comments fedilink hide all child comments

A tale of 2 casino ransomware attacks: One paid out, one did not - What can be learned from MGM's and Caesars' infosec moves::What can be learned from MGM's and Caesars' infosec moves

you are viewing a single comment's thread
view the rest of the comments

[–] just_another_person@lemmy.world -4 points 10 months ago (3 children)

Not running Windows would be a good start.

[–] sylver_dragon@lemmy.world 48 points 10 months ago (1 children)

Your choice of OS doesn't help when your IAM provider's tech support happily resets your admin passwords for the attacker.

[–] JJROKCZ@lemmy.world 36 points 10 months ago (2 children)

Most of our vendors only make products for windows, barely understand windows and certainly don’t understand Linux or as400, and they dont intend to. Those that do run Linux and as400 are actively transitioning their systems to a windows based version as it’s easier for the casinos to maintain.

Source: IT Director for a casino company and responsible for hundreds of windows servers, thousands of PCs, 12 Linux and half a dozen as400s - I’m not with Caesars or MGM thank god but their breaches caused me a ton of work and lost sleep trust me

[–] fruitycoder@sh.itjust.works 2 points 10 months ago* (last edited 10 months ago) (1 children)

Yikes. I've seen that strat before. Dinosaur vendors are the worst. My only advice to focus on replacing bad vendors like that wherever and whenever you can, getting stuck actively building out an already legacy system sucks. Good luck!

The "Adopt, Buy, Build" strategy is good one as well as the "strangler pattern" to help keep you from entrenching your self in shitty systems.

[–] JJROKCZ@lemmy.world 10 points 10 months ago (1 children)

Unfortunately there aren’t many vendors in this space, especially since a few of the shittier options have committed to just buying out competitors and sitting on their products rather than doing anything requested with them.

The casinos are extremely tight with money, they bring in tons, they just aren’t interested in spending it on anything other than building new/more casinos and of course c suite bonuses like all corps. They’re whiney and cheap, not good clients.

[–] fruitycoder@sh.itjust.works 2 points 10 months ago

IT being a cost center is a rough position to be in tbh, I get it. For me, even when I can convince them that moving to upgrading to more modern scalable systems will be an investment that should see an increase in uptime and a decrease in the number of admins needed, it is still a fight to get them to actually INVEST in it and not just unfunded mandate a change in systems.

I don't even want to think about what hundreds of Windows servers administration looks like. Like SCCM and Group Policy is more powerful than Linux admins give it credit for, but still at that scale what a nightmare. I hated it on the scale of tens of servers.

[–] AdamEatsAss@lemmy.world 1 points 10 months ago

All gambling will now require you to first log in with your apple ID!