OneCD wrote: ↑Tue Dec 06, 2022 4:31 am
adetogni wrote: ↑Tue Dec 06, 2022 4:26 am
WORST scenario I do get a deadbolt? I'll recover backup and reset. Annoyance? Yes. Lost data? no...
I posted an example of an even worse scenario here:
viewtopic.php?p=750053#p750053
Don't underestimate how badly lax security can bite you.
Well, that's a very, very, very extreme scenario. At least in Italy one's innocent until proven guilty.
I am *for* security. In fact part of my role is DPO (Data Protection Officer) which in Europe is a formal role of people involved with Data Protection (more connected to law than to actually network protection, but we do talk often with CEOs that don't do penetration test with the mantra "what could go wrong" or they don't plan a disaster recovery plan). So, yes, I do care for security. I've been hit by a ransom (on a corporate computer, not a personal one) and I lost data due to missed backups. I know the drill. I actually use the story of the HackingTeam company that went bankrupt due to a lack of security in my trainings.
However security has a cost associated to it. Any extra layer of security has a cost which needs to be factored in. Because to be super-extra-safe you would simply have it disconnected from the internet. Huge companies with huge IT security staff has been penetrated, and I'm pretty sure they had WatchGuard firewalls and DMZ and such. Still, perfect security does not exist because...zero-day.
There is also the operative cost, since to setup a "banal" DD-WRT you need to know how to do it, train yourself, keep firmwares up-to-date, monitor etc.
Using this edge-cases as an example...man, why don't you DON'T drive your car? Because regardless of your care, someone could miss a traffic light and hit you. Instead you minimize as much as possible (drive slowly, buy cars with airbags, use the safety belt...) and then you accept the extra margin risk.
All of this words
just to say that I draw a certain line on time and cost I want to invest to secure a network drive which is already backed up constantly.
Hope no one got offended