Sam
@sam@cablespaghetti.dev
833 following, 793 followers
https://cablespaghetti.dev/hosting-a-fediverse-instance-on-an-original-raspberry-pi.html
Windows is low on memory at Heathrow airport…
Cc: @slowe@mastodon.me.uk
Here’s a screen at Starbucks with a double whammy of Windows that isn’t activated and a crashed application.
This is a pretty sad hobby but I’m enjoying myself and so I will continue.
The luggage check in staff are doing their best with a hacked together system (cables everywhere!) so they can print bag labels.
British Airways have flown out extra staff to try and coordinate the whole thing. Took us maybe half an hour to get our bags sorted, other airline desks are not coping so well. 😬
Now in the rather long security line. Not sure if that’s related to the vMUSE hack or just normal here.
Edit: I broke the thread again by mistake. Prior thread: https://cyberplace.social/@GossiTheDog/115242040984922549
Jaguar Land Rover have extended their car production shutdown for at least another week: https://www.bbc.com/news/articles/c15kpxnn2p2o
There’s a curious and unsourced line at the end of the BBC article: “JLR is currently taking the lead on support for its own supply chain, rather than any state intervention.”
If so, why are suppliers laying off staff and calling for government intervention?
Jaguar Land Rover have no cyber insurance https://www.theinsurer.com/cyber-risk/news/exclusive-jaguar-land-rover-failed-to-secure-cyber-insurance-deal-ahead-of-2025-09-23/
Peter Kyle and Chris McDonald met JLR’s CEO and senior executives at its Gaydon headquarters to discuss latest situation.
https://www.gov.uk/government/news/ministers-meet-jlr-bosses-and-supply-chain-companies-to-help-secure-future-of-car-industry
Robert Peston, who was the first to report on the government's bailout of banks in the 2008 financial crisis, reports the UK government is considering bailing out JLR's suppliers by effectively becoming the lender of last resort - by buying parts off suppliers, and then reselling them to Jaguar Land Rover.
In effect the UK government will become JLR's supplier's customer.
https://www.itv.com/news/2025-09-24/how-the-government-plans-to-support-jaguar-land-rover-suppliers
If anybody is wondering, I took a tour of JLR's network border last night - everything is still offline, except for https://wslx.jlrext.com/ (single factor login), some routers running SSH to the internet, NTP and Fortigate firewalls with open ports to internet.
The BBC reports “Senior government figures are concerned about a pattern of cyber attacks on UK institutions and businesses, such as the British Library, Marks & Spencer, and the Co-op.”
They should be. We’ve got to collectively work together to defuse the ransomware economy - even if that means repositioning security industry incentives.
We’ve also got to be deeply honest about where the challenges are coming from - which is not just Russia, but at home in the UK.
The FT has figured out JLR have no insurance.
I'm not sure they'll take the full cost of recovery though - since the government is likely bailing out their key suppliers.
https://www.ft.com/content/c301e78a-38e7-4818-b367-14af85130c61
For those who haven't been following JLR in detail, key chain of events:
1) JLR outsource key IT and infosec functions to TCS, approved by 1x director and 2x NEDs on both JLR and TCS boards
2) JLR transfer staff by TUPE to TCS
3) TCS lay off transferred UK staff, including cyber risk and governance and cyber monitoring
4) record profits for a decade
5) got hacked
6) company stops functioning
7) get government to bail out their key suppliers (in progress)
JLR have some of its IT systems back online. Production is still halted. https://www.bbc.com/news/articles/c0q75q4l87no
I can’t see anything internet facing back online. Looks like they have bits of SAP back for supplier payment of historic orders.
If you’re wondering how JLR’s parent company, Tata Motors, is getting on - share price is up over the month. Investors don’t really care that a large part of the org shut down as they know the UK taxpayer will prop it up.
The Chair of the Business and Trade Committee, Liam Byrne MP, has today written to TCS asking probing questions about the attacks on Co-op, Marks and Spencer and Jaguar Land Rover. https://committees.parliament.uk/publications/49627/documents/264574/default/
Personally I think the UK is going to be one to watch now, as if I was an e-crime threat actor - I’d zero in on the UK.
Orgs have shown they will pay, teens getting in and poor MSPs shows poor security practices, the NCA won’t tell the ICO (data regulator) too around what actually happened, and the government will bail out orgs financially and provide IR help while they recover.
It’s all of the wrong messages being broadcast. Strap in.
If you look at the NCSC UK too, their remit is to help make the UK the safest place to do business..
but if you look at the general output lately, it’s quantum stuff and firewall espionage stuff. They’re good people but it feels too close to GCHQ, and so too far removed from the operational reality on the ground.
My view - saying the recent incidents should be a wake up call isn’t moving the needle enough in business.
So a lever is, if JLR need bailing out, put the PM on TV to announce it, explain why and the context of attacks on UK institutions, and announce paying all extortion attempts will be outlawed by the end of parliament. It would send shockwaves through business and force real resiliency planning.
The Times (paywalled) reports JLR plan to restart some production in just over a week - "puts suppliers on notice for production at its Wolverhampton engine works to resume on October 6".
The prior update was production suspended until October 1st, so I imagine that is slipping.
Government to guarantee £1.5bn loan to Jaguar Land Rover directly https://www.bbc.com/news/articles/cgl15ykerlro
There’s a bit on TCS outsourcing of key roles at JLR here. https://www.telegraph.co.uk/business/2025/09/26/suspected-weak-link-in-jaguar-land-rover-ms-hacks/
Jaguar Land Rover has sought £2 billion in emergency funding from global banks as the carmaker tries to ease the financial strain of cyber incident.
The funding is separate from a £1.5 billion loan, provided by a commercial bank and guaranteed by UK Export Finance, that the carmaker will repay over five years.
MPs are now saying Jaguar Land Rover may need more government invention on top of the existing £1.5bn help https://www.bbc.com/news/articles/c62zggj69e0o
JLR say "some sections" of their manufacturing will restart in the coming days. Network border all still offline, btw.
Obviously, it's going to be interesting to see the long term implications of all of this.
The next time there's a big ransomware incident in the UK (and there will be, as there's no real plan about how to deal with it), there's going to be calls for government financial intervention (via taxpayers) and NCSC to do incident response etc. Cyber resiliency for board = demand support when IT goes wrong.
A senior civil servant refused to sign off on Saturday's announcement of financial support for Jaguar Land Rover, the government did a rare overrule of them and proceeded anyway. https://www.ft.com/content/33d91816-514f-4da1-b6dd-abedbc21df61
JLR UK has been offline for so long they've gone from 400+ devices on Shodan to about 40
From network border monitoring, I can see JLR have been working to get sections of their on prem services (behind FortiGate firewalls) back online this weekend, I’m guessing Monday is when more substantial restoration begins.
There we have it, JLR starting to phase back manufacturing. Externally it looks like they’ve managed to restore some systems.
JLR have restored some production at several sites, and are working to financially support some suppliers
https://www.bbc.co.uk/news/articles/c3w5g6683p8o
The ongoing cyber incident at Jaguar Land Rover has cost £2bn so far according to the CMC, who are credible.
JLR do not have any cyber insurance (not that it would help much as they all have policy limits far below that).
I think the NCSC should probably release some details about what happened at JLR as I think it would help orgs defend, and help focus the minds of boards.
There’s 100% orgs out there thinking they were dealing with Russia’s elite intelligence unit, who they’d just pay off. Imagine, in fact, you’re in a fight with Mr. Bean.
(Reuters) - Ratings agency S&P Global said on Thursday it is downgrading the outlook of India's Tata Motors, opens new tab to 'negative' on "slow recovery" of its UK unit, Jaguar Land Rover, which was hit by a cyber attack earlier this year.
I'm going to guess JLR read my toots (hi and sorry) as they've been back and removed SNMP and SSH from the internet. Their network border looks really good nowadays.
Jaguar Land Rover's CISO left the organisation after this incident.
It appears either JLR and/or the UK government are trying to reposition the JLR ransomware incident as involving the Russian government.
There’s no evidence of that. All the evidence points to multiple intrusions by different groups, including Russian ecrime groups.
Jaguar Land Rover didn’t have cyber insurance, so I’m pondering if this is a play to claim nation state attack via one of their other policies.
https://www.nytimes.com/2026/06/26/world/europe/jaguar-russia-hack.html
JLR have announced £1.7bn in cuts over two years. This apparently includes around 4k jobs in the UK.
The cut figure is cost they allocated for the cyber incident this thread documented. From what I’ve been able to find out, they haven’t yet been able to convince any of their insurance providers to pay out.
@GossiTheDog And chances are the people losing their jobs to cover these cuts aren’t the ones who caused it, just low end employees likely already struggling - being impacted by a companies’ poor governance and information security.
@GossiTheDog I'm sure the taxpayer (me) will be only too pleased to help with a Government-funded bailout. That's what usually happens with too-big-to-fail organisations that have self-inflicted financial catastrophes in the UK. 😞😡
With everything going on in the world it’s nice to escape into a (vaguely) possible future where the universe might be a more positive and accepting place.
I’m sure it’s not everyone’s cup of tea but for me it’s comforting exactly like a perfect cup of tea…
Full #AltText
One of Britain’s most senior police officers has launched an angry tirade against Extinction Rebellion protesters going “all floppy” when they get arrested.
Sir Stephen House, the deputy commissioner of the Metropolitan police, said the tactic of going limp was a “flipping nuisance” as it required extra officers to drag protesters away.
House told a London assembly police and crime committee hearing: “We have asked them to stop being floppy. And that might seem like a silly thing to say, but when we arrest them and pick them up, they go all floppy, which is why you see four or five officers carrying them away. It’s a complete waste of officers’ time, and a complete pain in the neck.”
House also expressed annoyance at how the tactic made the police look heavy-handed. He said: “The problem with them going floppy and four offices carrying them away [is that it] looks to the general public like police are overreacting here. We’re not making them go floppy. They’re just sort of being a nuisance.”
Hey gang, I really need a job. UK, remote, something to do with computers.
I've been doing all sorts of software plumbing for a decade now, I can speak C, Java, PHP, Python, JavaScript, HTML, CSS, even a bit of Assembly for certain architectures in a pinch.
I might not be extremely specialized in any one area but you bet I can solve that one nagging problem you're not sure what specialist you need for. I've done frontend, backend, embedded, everything.
Please boost!
Reminder – Tomorrow is a Nationwide Mobile Test of UK Emergency Alerts https://www.ispreview.co.uk/index.php/2025/09/reminder-tomorrow-is-a-nationwide-mobile-test-of-uk-emergency-alerts.html
BNIB.
I suppose I should find out how to make it work.
Perhaps not tonight.
I am interested in the historical use of these though. Dedicated telephone line that only gets called in an emergency?
I’ve planned very little so far. Has anyone got any recommendations for things we should do while we’re there?
Food, music (rock/metal?), nerdy things and standard tourist things are all welcome!
Vielen Dank im Voraus
The language in which a post is written can now be set from the UI; you must configure the list of languages you usually post in in the User Settings.
Added support for bullet points in posts (lines starting with an asterisk or a hyphen, plus a space).
Added Dutch (nl_NL) translation (contributed by martijndeb).
Added Western Frisian (fy_NL) translation (contributed by martijndeb).
Mastodon API: Fixed repeated entries in timelines.
Added nodeinfo 2.1 support.
Fixed boosts from the command line not showing in the public timeline (contributed by xvello).
Updated several language files (contributed by zen and daltux).
Retrieving a post's replies is now possible via ActivityPub.
If you find #snac useful, please consider buying grunfink a coffee or contributing via LiberaPay.
Thanks for the hookup GitHub!
https://docs.projectbluefin.io/blog/2025/08/29/github-oss-fund/
Good morning
(It is currently part of the morning routine for the little horse to wait for the goats in that one spot where it's easy for the goats to climb on him, then he happily accepts back massages)
I feel like this needs a hashtag. There must be more crashed public computer enjoyers out there…
Watching the premier of the Python documentary ( https://www.youtube.com/watch?v=GfH4QL4VqJ0 ). Reminded how the Python 2 -> 3 transition has a lot of parallels to the IPv4 -> #IPv6 transition.
On the second, I’m currently in Italy and mozzarella is plentiful and cheap. I’m making a good go of finding out the answer and will let you know (or I suppose I won’t if the answer is yes).
I’ve had this book on my “To Read” list for about four years, since reading the Wayfarers series back to back.
I put it off because frankly £10 for an ebook copy of a 150 novella is expensive and I was hoping it would get cheaper at some point.
Anyway, I’m at a point in my life where I’ve got a high pressure job, two demanding boys, a wife to keep happy and bills to pay. Frankly it all gets a bit much at times and I do find myself questioning the purpose of it all.
Honestly maybe I need to find religion, but in the absence of that this book is pretty bloody relatable to me right now. I will definitely be recommending it to others as a thought provoking quick read.
History