Ransomware

The threat in this episode is personal as well as technical: someone takes the files, records, and routines people depend on and makes access to them uncertain. A school, a small business, or a family photo collection can all be hurt by that interruption.

Encryption is only part of the picture. An attacker may also steal data or reach the systems used for recovery. The useful response is to think about boundaries: which accounts can modify which files, which systems share credentials, and which copies remain independent of the compromised machine.

Rehearse the return journey#

A folder named “backup” is a claim. A documented restoration is evidence. Can you obtain the copy without the original administrator's laptop? Can you restore it to a separate environment? Can you read meaningful records afterward? Who decides when the restored service is ready?

Those questions turn an intimidating topic into concrete work. They also explain why updates, limited permissions, and recovery planning belong together: one reduces opportunities, another limits reach, and the last gives you a way back.

The capstone hardening sprint asks for a restore and a real record check. Keep that habit even for a small project. Learning how to recover before an emergency is far less stressful than discovering, under pressure, that your only copy depended on the machine you lost.

Original episode on YouTube.