Top
Best
New

Posted by rustyhancock 6 hours ago

Queens Public library under ransomware attack e-borrowing suspended(connect.queenslibrary.org)
123 points | 84 comments
cush 1 hour ago|
This happened in seattle a few years ago. Computer systems were down for months. They just let everyone borrow using an honor system.
gregl 1 hour ago|
same for Toronto: https://www.cbc.ca/news/canada/toronto/toronto-library-ranso...
waltbosz 2 hours ago||
https://spotlightdelaware.org/2024/09/23/delaware-libraries-...

This happened to my state's library system a while back. Public computers and free wifi were down for a few months, but no major disruptions of lending services. I don't think the state paid any ransom, instead they just repaired their systems.

utopiah 7 minutes ago||
So I do support authors being paid fairly for their work, with attribution, yet I do not support DRM.

Since we are talking about e-borrowing I assume DRM are involved. If they are not, ignore the rest.

The point of DRM (ignoring their terrible side effect) is precisely to keep on controlling data even after content has been released. There is a validation mechanism (typically pinging back the digital right owner) to insure that the file can indeed be read. So... do not validate all the signed books already out, issue a new key for the library to "e-borrow" (hate that term) once again. Why is this even taking more than 1min? I don't get it. It feels like once again in theory it could be positive but in practice the negative side effects of DRMs trump out everything.

RobotToaster 5 hours ago||
That seems a pretty terrible target for ransomware, it's not like public libraries have huge amounts of money.
rskeens 3 hours ago||
A California nonprofit's computers were once stolen only to be returned by the thieves.

That would also have arguably been more risky of a redemptive act than the right thing to do in this circumstance.

afavour 36 minutes ago|||
At this point I wouldn't be surprised if automated AI agents are probing vulnerabilities and following a preset playbook for extortion without any human involvement.
Geezus_42 4 hours ago|||
I highly doubt it was targeted.
luqtas 1 hour ago||
i bet Sam is getting some e-books /j
no-user 1 hour ago||
lol
lxgr 5 hours ago|||
Immoral criminals? Now I've seen everything.
account42 4 hours ago|||
The point is that there are surely targets that are better funded and thus more likely to pay out large sums of money in order to fix things.
lxgr 4 hours ago||
Definitely, but ransomware groups generally have incremental customer acquisition costs/margins that most other industries can only dream of. They'll encrypt first, ask questions/set prices later. The whole process might even be fully automated at this point, "thanks" to cryptocurrencies.

I remember hearing that they do have customer support, though! Not sure if you can escalate to a sales rep to get a personalized quote or non-profit discount from there.

Geezus_42 4 hours ago|||
I think Darknet Diaries talked about that. I don't remember what episode.
matkoniecz 3 hours ago|||
> Not sure if you can escalate to a sales rep to get a personalized quote or non-profit discount from there.

some groups offer it (not out of goodness: rather on price discrimination grounds)

tombert 1 minute ago|||
Really? Have you seen a man eat his own head? No? So then you haven't seen everything. And neither have I.
hahn-kev 4 hours ago|||
Right? Like what are they going to delete? The digital books? Who had what checked out?
redwood 4 hours ago||
Kind of like "erase the debts" from Fight Club? "Haven't returned that digital book? Keep it!"
thatsabadlook 3 hours ago|||
Agreed. This is just shitty. Libraries are one of the few things holding the world together right now, and no they don't make tons of money...
bell-cot 5 minutes ago||
Yeah. But if 0.1% of humans are in the bottom 0.1% for personal morality, and there are more than 8 billion humans on the Earth...
beerandt 2 hours ago||
The libraries here have figured out that no one votes against library taxes and have built up a $250 mil slush fund on top of all new facilities and so many unnecessary "services" that they have a full fledged advertising campaign to tell people about these things they didn't even know they need.

They really are looking for a reason to exist in the digital age.

xp84 1 hour ago|||
I say this as a government-skeptical conservative: libraries are a great use of taxpayer money. Of all the things that people can vote to tax themselves for, here’s something that everyone can use. It’s great.

Many other uses of tax dollars are handouts for a very small number of people that most of us see no benefit from (and may even have side-effects that make things worse for everybody else).

cattenwallen 1 hour ago||||
I have never seen a service the library provided that I didn't think was at least marginally worth throwing some tax cents to provide for free for people that need it. I looked at the NYPL services page https://www.nypl.org/help/services and none of it looked not useful. Were any of them necessary? I mean, probably not in the way nobody needs a library, only that libraries are a fundamentally good service to a community.
dghlsakjg 2 hours ago||||
That sounds awesome!

A beloved public institution, that improves society as a whole, is equally available to all, has enough money to do their mission well offer auxiliary services and to take advantage of PSA programs?

What a treasure.

redwood 4 hours ago||
Today I learned that Queens has a public library system that predated the consolidated New York City library system and fiercely fought to maintain independence rather than come under the control of a Manhattan-based system
justusthane 2 hours ago||
Additionally, a Queens library card is available to anyone world-wide for $50 annually. I have a membership in Canada to access their digital library.
rsstack 4 hours ago||
Brooklyn too. (Bronx and Staten Island being served only by NYPL, the “Manhattan” one)
lelandfe 3 hours ago||
And the consequence of this is that I have to get three different library cards haha.
rsstack 3 hours ago|||
Another consequence is that on the Libby app you have better chances to find something available, and each one’s limits are separate!
PLenz 3 hours ago|||
The tbree systems in NYC also serve the entire state, not just the city. Any NYS resident can get a card at each. I do and use the e book systems for all at the same time even though I rarely go into the city these days.
mixdup 48 minutes ago||
Seems that even as three separate systems, they'd at least just let a card from any of them work at all three. Or issue a single unified card and let that be the only point of commonality between them, if all other operations being independent is important to them

Kind of like how many regions will have a unified transit payment card, even if it covers a half dozen completely independent adjacent transit systems

brador 3 hours ago||
It’s a library.

Wipe the system and start again.

KineticLensman 2 hours ago||
When the British Library was hit by ransomware, some systems were down for months. They were old software that didn't run on the newer more secure systems the library had to migrate to. And there was no funding to rewrite them, not without cutting already affected services.
dotemacs 30 minutes ago||
The British Library is still recovering from the 2023 attack, more than three years later... some systems are still not available.
criddell 19 minutes ago|||
So you pull everything off the shelves, enter it into the system, then reshelve it.

The library has something like 5 million books. How many could you enter into an empty system each day? Maybe 1000? That would take a decade to complete.

gosub100 3 hours ago||
should be simple, restore from backup. right ?
mcdonje 1 hour ago||
The post headline could use some punctuation.
rusbra 5 hours ago||
Is this due to the php vulnerability from a few weeks ago? Guessing they were on some php-based cms, and their staff never got around to fixing it in time.
sheepjumpmoons 3 hours ago|
Ransomware infections frequently start with a phished user, not a popped web app.
vinnymac 2 hours ago||
Not to mention since a few weeks ago several other CVEs have dropped that would have been just as exploitable. Such as *sshole
program_whiz 1 hour ago||
I see a lot of people bemoaning the loss of a public service, but honestly I'm not sure the public library is an important service. At one time, yes, it represented access to knowledge for everyone. For everyone talking about how important this is, I'm curious how many have visited a library in the last 5 years to actually get a book.

Today, it could probably disappear and no one would miss it. There's a reason these places operate on a shoestring budget and haven't bothered to update software security. The services we value, we pay for or vote for. If there was a proposition to close libraries in favor of some other minor benefit (e.g. one extra field trip for every school child per year), it would probably lose badly.

Probably most of the relevant functions of a library can be accomplished by other more efficient means. Student loan forgiveness (librarians), homeless shelters with computers, and free daycare for kids. That's basically what people use it for now, and all can be better done if we just admit what its for and do that instead.

dieselgate 2 minutes ago||
I live a few blocks from a library and work there, borrow movies on dvd and books all the time. I see my neighbors there more often than by the house
cattenwallen 1 hour ago|||
NGL it is crazy to me to declare no one needs a library when a new hardcover book is at least $30. I would be out hundreds of dollars, probably over a thousand a year, if I had to buy new every time I wanted to read some book I heard of and maybe didn't even enjoy (the guilt-free "read 20% decide its not for me" is amazing).
LtWorf 1 hour ago||
Basically most people do not read, and most people here have no social life.

Libraries are for reading and socialising, so many users here have a really really hard time to imagine that someone might have some benefit from them.

cattenwallen 40 minutes ago||
Yeah but even if I didn't read, I would want any kids I own/any kids someone else owns to be able to access books, and even middle grade hardcover chapter books can be $30. I can't imagine paying even $10 for every single big flippy book they give the toddlers, that's gotta be at least a hundred a week just for the luxury of reading to the child for bed.
neom 59 minutes ago|||
https://en.wikipedia.org/wiki/Third_place

Personally, I believe these are important for a functional society more generally.

vel0city 1 hour ago|||
> For everyone talking about how important this is, I'm curious how many have visited a library in the last 5 years to actually get a book.

At least every other week if not more often. I also use the library digital services a good bit. There's always lots of people at the libraries I go to browsing books, I imagine they're also checking them out.

> it could probably disappear and no one would miss it.

The libraries I go to have so many people using their various services constantly. People studying and reading. Kids playing, exploring and reading. 3D printers buzzing. Classes and events being hosted.

> one extra field trip for every school child per year

You're going to replace something lots of people use across all age ranges constantly with a single day event for only children once a year? Sounds like a terrible loss IMO.

I agree a library is way more than just a place to get books today. They do offer a lot of community center features, and I think modern library designs should cater to that need as well. But they're not homeless shelters, they're not daycares. They still have their own specific use, a general place of learning and knowledge for all people. A place for all the community to come together, not just little kids or just the homeless. It's just the way we go about sharing that has evolved a bit over time compared to the stodgy old libraries of the past.

hgoel 45 minutes ago||
Always shocking how willing some Americans are to tear down services that a large portion of the world would envy. Particularly when they can't even be bothered to look up what the service provides to the community.
rustyhancock 6 hours ago|
Unfortunately, QPL has suffered a ransomware incident and currently much of the online access is unavailable