Backup archives - Custom Application Development

Custom Application Development:

Backup

Feb 3 2009   1:37PM GMT

Scary Situation with Fannie Mae



Posted by: Joe Coley
Security, Backup

News has been spreading throughout the press about the case of Rajendrashinh Makwana, a contractor with Fannie Mae who is accused of planting a “Logic Bomb” into the FNM environment which was designed to destroy data throughout the FNM network.  I’m sure we’ll be hearing much about this case as time goes on and details continue to be revealed.  That this individual as a contractor at such a large operation had the “root” passwords simply amazes me (as well as scares me!).  As the story goes it appears that it was shear luck (..or perhaps Divine guidance) that the destructive script was located.

Of course, I’m a contractor for my clients (all small), and I like Mr. Makwana, know their “root” and Admin passwords since I couldn’t do what I do for them without that knowledge — but here is a case where size does make a difference.  If in fact Mr. Makwana’s script could have destroyed access to some 4000 network servers I would have to question why any individual, employee or contractor would be given such “power”.  I would think that at the very least it would be “spread out”.

Some of what I’ve reviewed so far about this case also has made reference to a sense of “any” large organization having security with their backups — well, I don’t know about you but I wouldn’t want to have to resort to the backups!  Even if not a byte of data was lost, the loss from the disaster and downtime would be huge, certainly NOT what we need in our faltering economy!  As for backups — my experience generally has been that they are questionable at best — i.e. When were they last tested?  In many case I know of the backups never were tested.

For a small business the loss can be managed, sort of.  However, given the size and industry of a Fannie Mae any loss can mean significant costs to recover.  Here we have another indication of vulnerability - sure am glad the other tech “spotted” the script!  Whether we like it or not, we humans inhabiting planet earth are vulnerable and dependent upon each other in more ways than most of us are comfortable with.

Dec 4 2008   3:03PM GMT

Backup, Backup, Backup



Posted by: Joe Coley
Custom software development, Backup, Application Backup

There is no end to the need for backup(s).  I’ve been chided on numerous occasions for always taking the safe route — which basically in my book is don’t change ANYTHING without being sure you have a backup.  Backups take time — but it is time well worth taking!  Especially if you have to make a change in the middle of a workday — being safe is the only way to go in my opinion.

So, by now you are probably figuring that I had an “incident” to spark my flurry of writing on of all things — backup!  If you guessed that, you would be 100% correct!  By once again being what some have called “over cautious” about ensuring up-to-date backup I have been able to rescue a customer from disaster.  Their nightly backup was “old”, and rather than take any chance with “something” going wrong, I insisted in making a backup of their critical data before doing what “should” have been a “safe” maintenance function.

Well, the “safe” maintenance function failed — for reasons unknown!  (…aren’t they always?”).  However, the fact that the maintenance function failed was not apparent — in fact it looked like all was back to “normal”, mission accomplished — until the next day when a user went to run a report and the requested data was “missing”.  Further investigation revealed that the table was in fact missing some 60,000 records — a disaster for this client!

Fortunately, because I took the “safe” route, I was able to recover the missing records and combine them with the “new” records added during the 24 hours that it was thought all was back to normal.  End result — apparently no data lost.  Moral of this true story — backup, backup, backup!