EN-PT The attack on Hive's greatest witness
My wish for a great day to friends of the Hive community!
On February 10, 2024, during the early hours of the morning, a cyber attack targeted the user @ ARCANGE. For those unfamiliar, ARCANGE is Hive Blockchain's #1 witness.
The witness most supported by users, who have accumulated more than 82 million HivePower of trust deposited in their favor. Among them, my vote is also cast.
This is essential so that there is a correct understanding of the meaning of this attack. A virtual person was attacked, but what does he represent?
Hive's main witness was attacked
I'm not a personal friend and I haven't even exchanged more than two words with ARCANGE, I highly doubt he knows who I am, that doesn't stop me from supporting him at this critical moment.
In addition to being a Hive witness, ARCANGE develops and maintains several projects that run on the blockchain,
- HiveBuzz: I use it daily;
- HiveSQL: I use it monthly;
- HiveAuth: I use it infrequently;
- Engage: I don’t use it;
- Hive Recovery: I don't use it;
- Hive.NET: I don't use it;
- Xfer: I don't use it;
All of these projects have been unavailable since the attack. Only block operations continue to be performed ("witness nodes").
What happened
In the early hours of the morning, the servers were hacked, turned off, and the disks were encrypted.
Unusually, backups were also accessed and encrypted, which makes it difficult to immediately return services.
ARCANGE reported having notified the cyber authorities. In a way, this can slow down the restoration process even more.
What is being done
On the other hand, an old backup is being sent to a new, possibly temporary, network infrastructure. There is no clear information regarding the return of services/projects as we know them. Perhaps old versions will be reestablished, until there is a parameter of what the future will be like for each individual project.
Impacts
Many tools depend on projects maintained by ARCANGE, which makes us assume that their survival directly depends on the survival of the work developed by him.
In my superficial view, third-party projects that relied solely on authentication using HiveAuth are immobilized.
The data collected through HiveSQL, which allowed the creation of reports and various analyzes on the behavior of the ecosystem and statistical data, are inaccessible.
And also the platform that tracks and processes the ranking of each user's activities and achievements is frozen. Although it is possible to read data from any time ago if necessary, this can generate a high volume of data processing, which can take days, or even be unfeasible compared to the "secondary" service that it is intended to provide.
Questions
We are left with some extremely important reflections, for after the services are running again.
The first is to understand that Hive's main witness was attacked. A personal attack, which disabled his various services provided to the community. This turns into an attack on the community. Who is interested in this interruption of "secondary" services provided by ARCANGE?
Everything and everyone online is vulnerable to attacks. However, there are security barriers and redundancies that were broken (doubly) in a short space of time, which can already be considered an unlikely event to be successful in a single attempt. Was prior knowledge necessary?
Did the community react to this attack, or did it not engage in any confrontation? Did the community assume that the attack was not on them? Who cares about this inertia?
I don't bring answers. Let's stick with the questions already asked, and with the questions that will still be asked by those more capable.
If you identify that I wrote something incorrect, please contribute your comment!
Meu desejo de um ótimo dia para os amigos da comunidade Hive!
No dia 10 de fevereiro de 2024 durante a madrugada, um ataque cibernético teve como alvo o usuário @ ARCANGE. Para quem não está familiarizado, ARCANGE é a testemunha número 1 da Hive Blockchain.
A testemunha mais apoiada pelos usuários, que acumulam mais de 82 milhões de HivePower de confiança depositados em seu favor. Dentre eles, meu voto também está depositado.
Isso é essencial para que exista o entendimento correto a respeito do significado desse ataque. Uma pessoa virtual foi atacada, mas o que ela representa?
A principal testemunha Hive foi atacada
Não sou um amigo pessoal e nem troquei mais do que duas palavras com ARCANGE, duvido muito que ele saiba quem sou, isso não me impede de estar em seu apoio nesse momento crítico.
Além de ser testemunha Hive, ARCANGE desenvolve e mantém diversos projetos que rodam na blockchain,
- HiveBuzz: utilizo diariamente;
- HiveSQL: utilizo mensalmente;
- HiveAuth: utilizo com pouca frequência;
- Engage: não utilizo;
- Hive Recovery: não utilizo;
- Hive.NET: não utilizo;
- Xfer: não utilizo;
Todos esses projetos estão indisponíveis desde o ataque. Somente as operações de bloco continuam a ser realizadas ("witness nodes").
O que aconteceu
Na madrugada, os servidores foram invadidos, desligados, e os discos foram encriptados.
De forma inusitada, os backups também foram acessados e encritptados, o que dificulta o retorno imediato dos serviços.
ARCANGE informou ter comunicado as autoridades cibernéticas. De certa forma, isso pode deixar o processo de restauração ainda mais lento.
O que está sendo feito
Por outro lado, um backup antigo está sendo enviado para uma nova infraestrutura de rede, eventualmente temporária. Não há informações claras a respeito do retorno dos serviços / projetos da forma como conhecemos. Talvez versões antigas sejam reestabelecidas, até que se tenha um parâmetro de como será o futuro de cada projeto individualmente.
Impactos
Muitas ferramentas dependem dos projetos mantidos por ARCANGE, o que nos faz supor que a sobrevivência delas depende diretamente da sobrevivência do trabalho desenvolvido por ele.
Na minha visão superficial, projetos de terceiros que dependiam unicamente de autenticação usando HiveAuth estão imobilizados.
Os dados coletados através da HiveSQL, que propiciavam criação de relatórios e análises diversas sobre o comportamento do ecossistema e dados estatísticos estão inacessíveis.
E também a plataforma que rastreia e processa ranking de atividades e conquistas de cada usuário está congelada. Apesar de ser possível ler os dados de qualquer tempo atrás que seja necessário, isso pode gerar um alto volume de processamento de dados, o que pode levar dias, ou mesmo ser inviável frente ao serviço "secundário" que se propõe a fornecer.
Perguntas
Ficamos com algumas reflexões de máxima importância, para depois que os serviços estejam rodando novamente.
A primeira delas é entender que a principal testemunha Hive foi atacada. Um ataque pessoal, que desativou seus diversos serviços prestados à comunidade. Isso transforma em um ataque à comunidade. A quem interessa essa interrupção dos serviços "secundários" prestados por ARCANGE?
Tudo e todos que estão online são vulneráveis a ataques. Porém, existem barreias e redundâncias de segurança que foram rompidas (duplamente) num curto espaço de tempo, o que já pode ser considerado como um evento improvável de ter sucesso em uma única tentativa. Conhecimento prévio foi necessário?
A comunidade reagiu a esse ataque, ou não fez qualquer enfrentamento? A comunidade assumiu que o ataque não foi à ela? A quem interessa essa inércia?
Não trago respostas. Fiquemos com as perguntas já postas, e com as perguntas que ainda serão feitas por aqueles mais capazes.
Caso você identifique que escrevi algo incorreto, por favor colabore com seu comentário!
crazyphantombr apoia a comunidade FreeCompliments!
crazyphantombr apoia a curadoria brasileira!
crazyphantombr apoia o projeto holozing !
crazyphantombr apoia o projeto PGM!
Posted Using InLeo Alpha
Ugh. I was wondering what happened to @arcange and his many important Hive services. This sheds some light on the situation. This is very sad and unfortunate. Where did you find this information? I deeply hope that he'll be able to rectify things very soon. Thank you for sharing this. 😁 🙏 💚 ✨ 🤙
I am a frequent user of the services provided by arcange, so I found out on the same day through the communication he made on the official hivesql channel.
I shared it because I found it very overwhelming for something like this to happen and for the community to remain silent. From my point of view, we need to react appropriately and show that we are committed to the community, which today is represented by our attacked witness.
!LUV
tydynrain, crazyphantombr sent you LUV. 🙂 (2/10) tools | trade | connect | daily
Made with LUV by crrdlx.
Ditto that here, I noticed immediately when things stopped working. OK, very good to know. Well, I'm very grateful that you did share it, as I've been wondering for days. He just posted in the #hivesql channel of the Hivechain.app Discord server about finally getting HiveSQL up and running again, but that it's going to take a while to catch up with the Blockchain.
Indeed, and I agree with you. I still can't even imagine someone wanting to destroy what he does. This attack also highlights the necessity for greater decentralization of Hive's infrastructure. Thank you again for posting the information! 😁 🙏 💚 ✨ 🤙
!LUV
crazyphantombr, tydynrain sent you LUV. 🙂 (2/10) tools | trade | connect | daily
Made with LUV by crrdlx.
Well done @crazyphantombr
@tydynrain nominated you for a prize in the draw
!ALIVE
!BBH
@crazyphantombr! Your Content Is Awesome so I just sent 1 $BBH (Bitcoin Backed Hive) to your account on behalf of @heartbeatonhive. (32/50)
😁 🙏 💚 ✨ 🤙
Had mixed feelings reading this post. The bad news is that on February 10 there was an cyber attract on Hive greatest witness. Great full for all those other important informations in your post. Best wishes.
That is a serious situation, we hope things normalize
!CTP
Thank you my friend
!LUV
oasiskp2, crazyphantombr sent you LUV. 🙂 (1/10) tools | trade | connect | daily
Made with LUV by crrdlx.
I hope he can get everything back up and running, and in some way hack the hackers.
!ALIVE
@crazyphantombr! You Are Alive so I just staked 0.1 $ALIVE to your account on behalf of @ myjob. (4/10)
The tip has been paid for by the We Are Alive Tribe through the earnings on @alive.chat, feel free to swing by our daily chat any time you want, plus you can win Hive Power (2x 50 HP) and Alive Power (2x 500 AP) delegations (4 weeks), and Ecency Points (4x 50 EP), in our chat every day.
That's really sad, thank you for sharing