JohnJun 22, 2023
Duane Gran
Ransomware, but they install an unlicensed copy of Oracle somewhere in your organization and threaten to tell Oracle about it if you don’t pay up.
Jun 22, 2023 at 1:01amWeb
Show threadKee HinckleyJun 22, 2023
@duanegran Heck. They could just add a CPU to one of your Oracle virtual machines and have the same effect.
Show threadSloanLAJun 22, 2023
@duanegran @mmasnick This was the plan with JAVA all along…
Show threadTor Iver WilhelmsenJun 22, 2023
@SloanLA @duanegran @mmasnick um, Oracle «owns» Java now but they didn’t make it, Sun Microsystems did that.
Show threadSloanLAJun 22, 2023
@toriver @duanegran @mmasnick Not sure what your point is about a joke. That installer was insane and removing it was worse.
Show threadNick 'The Viking'Jun 22, 2023

@duanegran

That's diabolical

Show threadjoel bJun 22, 2023
@duanegran then they use the extorted funds to pay their Oracle judgement.
Show threadMaybeMyMonkeysJun 22, 2023
@duanegran not much of a threat. Oracle licensing is so convoluted that an audit will almost always turn something up.
Show threadMichael WymanJun 22, 2023
@duanegran I recall reading about disgruntled employees pulling that years ago, particularly when the BSA was offering bounties for employees turning in their companies for having unlicensed software on their systems.
Show threadslyborgJun 22, 2023
@duanegran @mmasnick Basically swatting, only worse.
Show threadStu Duerson, machina exo deusJun 22, 2023

@duanegran

In my view, Oracle is an extortionist. But who can tell, what goes on in a blind jury, NDAs and all!

Really! Who.can.tell?

Show threadAaron Bieber (no relation)Jun 22, 2023
@skydog @duanegran Hot take: all companies are extortionists.
Show threadAlex TremblayJun 28, 2023
@aaronbieber @skydog @duanegran I mean, there's "capitalism necessitates that I extort you", and then there's "Capitalism ALLOWS me to extort you!" :P
Show threadPeter Jakobs ⛵Jun 22, 2023
@duanegran but I thought this is how Oracle has been operating for decades
Show threadGary ParkerJun 22, 2023
@duanegran if they really don't like you, they install Adobe Creative Suite 😂
Show threadPatricia CordeiroJun 22, 2023
@duanegran
They install it on a vmware server, create a database, and trigger the use of all separately licensed options...
Show threadLeoJun 22, 2023
@duanegran They could set up an EC2 instance and run it for a few weeks, if you dont pay up.
Show threadRFJun 22, 2023
@duanegran
Truly a frightening scenario
Show threadTony WellsJun 22, 2023
@duanegran
If you don't pay up, as well as telling Oracle, they actually migrate all your data to it.
Show threadAlexJun 22, 2023
@duanegran you’re mean. I love if
Show threadThird spruce tree on the leftJun 22, 2023
@duanegran I think you agree to this when you update Java these days.
Show threadDennis Faucher  Jun 22, 2023
@duanegran I'm pretty sure the Oracle lawyers are already doing that.
Show threadFeohJun 22, 2023

@duanegran WHY are the CPUs on all our servers *PEGGED* 24/7? Why are all their IO buses *SATURATED* Why are they all dying a HORRIBLE death by swapping?

Oh. THAT'S why.
💣​🤯​😡​💥​

Show threadHcInfosecJun 22, 2023
@duanegran that's nasty
Show threadScott WeintraubJun 23, 2023
@duanegran that made me chuckle
Show threadCorneil du Plessis (he/him)Jun 23, 2023
@duanegran It's probably a good way to find out what Oracle actually costs since the ransom will be slightly lower.
Show threadAdam Beer (old account)Jun 23, 2023
@duanegran So my first thought is: "Easy solution: you contact Oracle before the hackers do, and inform them of the situation. Tell them that if they can tell you which computer the hackers installed it on, you'll uninstall it immediately." Am I missing something?