Results 1 to 10 of 13
-
February 6th, 2024, 07:54 PM #1
PA Courts Website Hit By Cyberattack
Working in the system security adjacent sector, every single time I have to deal with IT, NOC, or any "system engineer" the amount of incompetence is not only astounding, but also terrifying. I keep thinking "if my life were to actually rely on these people, i'd be genuinely scared". Every one of them barely knows what they're doing, and if something goes wrong, no one knows what to do. It's like the guy that cleans the furnace, but doesn't actually know how the furnace functions. He knows what he was trained to do, and nothing else.
https://patch.com/pennsylvania/acros...it-cyberattack
HARRISBURG, PA — The Pennsylvania Courts website was hit by a cyberattack over the weekend, disabling parts of the site and reigniting security concerns.
The incident was described as a "denial of service" attack, and involved actors flooding the network with traffic until the site was unable to respond, preventing access for real users.
Officials said they did not believe any court data was compromised, and the site remains open to the public for use.
"Our court information technology and executive team is working closely with law enforcement including the CISA, the U.S. Department of Homeland Security, and the FBI to investigate the incident," Pennsylvania Supreme Court Justice Debra Todd said.
It is not clear who is responsible for the attack or what their specific motivation might have been.
Certain services remain impacted on the site, including the PACFile feature, docket sheets, PAePay, and the Guardianship Tracking System, officials said.
The investigation is ongoing. More information will be provided as it becomes available.iAnal
-
February 6th, 2024, 08:08 PM #2
Re: PA Courts Website Hit By Cyberattack
I wouldn't lay this on the IT guys, but on the bean counters that probably denied multiple requests to upgrade their edge facing hardware to something that could hold up to a DDOS. Bean counters don't like to give money to IT unless they can prove it's actually needed. Next up, the SOE declaration so they can spend millions on short notice to replace the hardware that should have been replaced 20 years ago.
Rules are written in the stone,
Break the rules and you get no bones,
all you get is ridicule, laughter,
and a trip to the house of pain.
-
February 6th, 2024, 08:36 PM #3
Re: PA Courts Website Hit By Cyberattack
I wouldn't blame the bean counters either. Some DDoS attacks can only be stopped by disconnecting the server from the network.
Even with that, the connection itself will still be flooded, but the server itself will not be corrupted. The catch is, you have to be there right beside the server when it happens to pull the network cable out.
Whatever IP they are attacking will still have a flood of traffic until the attacker(s) feels they've done the damage.RIP: SFN, 1861, twoeggsup, Lambo, jamesjo, JayBell, 32 Magnum, Pro2A, mrwildroot, dregan, Frenchy, Fragger, ungawa, Mtn Jack, Grapeshot, R.W.J., PennsyPlinker, Statkowski, Deanimator, roland, aubie515
Don't end up in my signature!
-
February 6th, 2024, 08:49 PM #4
Re: PA Courts Website Hit By Cyberattack
Guys, GUYS, It's trumps fault.
FJB
-
February 6th, 2024, 09:13 PM #5
Re: PA Courts Website Hit By Cyberattack
DDOS mitigation is possible by just having a fatter pipe. Companies like cloudflare offer such protection, because they have such massive bandwidth available, as well as mitigation methods that involve routing traffic around the affected IP. Everyone in IT has heard of cloudflare, but few know how their process actually works. I had to deal with months of DDOS attacks where i basically built myself a mini cloudflare involving multiple servers around the country and just routing traffic to a different ip or server when it gets hit. I also have a cloudflare account and utilize their free and instant a-record and dns services so i don't have to wait for dns changes to propagate.
But that's the thing, I live this industry, after i go home, i do it more. Most IT guys don't.iAnal
-
February 6th, 2024, 09:39 PM #6
Re: PA Courts Website Hit By Cyberattack
This System Engineer listened to his IA guy. Period. Tell me what to bid, I*d say. All that said, IA efforts broke the system many times. No hacker, disgruntled employee or foreign govt got past the cryptos. Imagine that.
-
February 6th, 2024, 10:29 PM #7
Re: PA Courts Website Hit By Cyberattack
I think the state has some 1Gbps TLS(ethernet) circuits in Harrisburg for the PA Courts, at minimum(our 10G/100G availability has just come available in the last 3-5 years - ask me how I know.). I'm not sure how many circuits they have, and how Harrisburg's arrangement is set up, like whether as redundant or roll-over/diverse. All the county courts and magistrate offices in my work district have 100Mbps ethernet circuits, some oddballs with lower traffic have just 45Mb T3/50Mb OC1 or 10Mb circuits(although, I think I upgraded those in last couple years).
Most of the traffic on their connections is between court houses, magistrates, law firms, and official police queries. Not much is really used by the common folks to look up court dockets.RIP: SFN, 1861, twoeggsup, Lambo, jamesjo, JayBell, 32 Magnum, Pro2A, mrwildroot, dregan, Frenchy, Fragger, ungawa, Mtn Jack, Grapeshot, R.W.J., PennsyPlinker, Statkowski, Deanimator, roland, aubie515
Don't end up in my signature!
-
February 7th, 2024, 01:14 AM #8Senior Member
- Join Date
- Apr 2013
- Location
-
Greensburg,
Pennsylvania
(Westmoreland County) - Posts
- 408
- Rep Power
- 6688312
Re: PA Courts Website Hit By Cyberattack
Maybe we need to pay more taxes so our officials can afford to keep our information secure. It is tax season...perhaps we should make extra donations to the PA Dept of Revenue this year
-
February 7th, 2024, 01:55 AM #9
Re: PA Courts Website Hit By Cyberattack
Test run for the emergency that will force a reluctant Democrat Regime to cancel the elections this year.
Attorney Phil Kline, AKA gunlawyer001@gmail.com
Ce sac n'est pas un jouet.
-
February 7th, 2024, 06:24 AM #10Grand Member
- Join Date
- Nov 2017
- Location
-
New Tripoli,
Pennsylvania
(Lehigh County) - Posts
- 2,373
- Rep Power
- 21474845
Re: PA Courts Website Hit By Cyberattack
Similar Threads
-
The Supreme courts not being for pro 2A!!!
By chrmm22sr in forum GeneralReplies: 11Last Post: October 19th, 2013, 01:59 AM -
Courts got one right
By MrBi11 in forum GeneralReplies: 0Last Post: November 26th, 2009, 08:43 AM -
Carry in courts
By nlcrsn in forum GeneralReplies: 54Last Post: February 17th, 2008, 03:35 AM -
Magesterial Courts
By Statkowski in forum GeneralReplies: 2Last Post: April 3rd, 2007, 10:25 PM
Bookmarks