Top all-time · #13930
Gavin Ashton
Personal blog · gvnshtn.comsecuritybusiness
Gavin Ashton's personal blog at gvnshtn.com covers security and business. Since 2020, 5 different Hacker News readers have linked it 5 times, most often “Maersk, Me and NotPetya”. The last post was in 2020, but the archive is still widely read.
Too few sampled comments (4) to say how often HN recommends it.?
Why HN links it
HN readers link this blog's Maersk NotPetya post, about how the ransomware crippled Maersk and how it recovered, and cite it on security monoculture risks in Microsoft-based stacks.
Summarised by Claude from a sample of 4 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Enterprise identity, minus the magic quadrants and the breathless LinkedIn posts. Honest notes on what's working, what's in a heap and on fire, and what we're all pretending This Is Fine. Click to read Gavin Ashton on Substack. Launched 2 years ago.
Most-linked posts?
- /posts/maersk-me-notpetya/2 people · 2 mentions · first linked 2022-05-16
- Maersk, Me and NotPetya2 people · 2 mentions · first linked 2020-06-21
What Hacker News says?
All the internet backbone routers, endpoint routers and switches, hardware firewalls, VPN concentrators, the SSH daemons, SSL software, RSA keyfobs and the like, the content delivery networks and DNS ecosystem, SSL public trust system, the connectivity providers from ISP networks and national and international fibre connections to cellular and wifi networks, web browsers which billions of people use to interact with…
Comment linking /maersk-me-notpetya/
on “The Insecurity Industry”Submitted Maersk, Me and NotPetya as a story · 195 points
HN discussionThe VM may get compromised, it depends on how you set it up, not all apps need to phone home for a start and dont need anything more than limited network access but thats firewall/IPS/IDS domain. You hint your may be corporate unlike a home user who has less tools and disposable income at their disposal and VMware unity is a quick cheap fix as its free for home use. Its ok to burn an image to the ground, do you chec…
Comment linking /maersk-me-notpetya/
on “PortableApps.com Hits 1 Billion App Downloads”> There's nothing wrong with the Microsoft stack. Except for the security mono-culture, where a single vulnerability can take out your entire operation. Just ask Maersk about NotPetya: * https://www.i-cio.com/management/insight/item/maersk-springi... * https://gvnshtn.com/posts/maersk-me-notpetya/
Comment linking /posts/maersk-me-notpetya/
on “The case for consolidation”https://gvnshtn.com/posts/maersk-me-notpetya/ Its a long read, but gives an insight how the ransomware NotPetya crippled Maersk and how they recovered. Looking at how the earlier ransomware WannaCry crippled the crown jewels of many countries, highlights a weakness in non diverse systems. I even know who is behind them, but I cant prove it, so why even mention it? Because I'm getting closer to proving it, which make…
Comment linking /posts/maersk-me-notpetya/
on “Ask HN: What is the best postmortem you've seen?”
