Should we be afraid of the next Carrington event?

The last big Carrington event happened in 1859. In a nut shell the Carrington event was a large solar storm. Simply put this caused a massive amount of energy to enter the earths lower atmosphere. Things like power lines, and telegraph lines, acted like conductors and absorbed lots of this electrical energy.

Much doom and gloom has been discussed about what this might mean in today’s highly electronic world. Replacing a power station transformer that has exploded is an expensive and time consuming process, in some situations it could take years.

Large Carrington events occur about every 150 years and we are due for a big one soon! Appart from all the doom and gloom there are some positives.

Humanity is staring to develop techniques to manage these storms. Lloyds of London the insurance company publicly published this paper back in 2013 it’s an interesting read (The executive summary is food for thought!) and it brings up the issue of money, insurance and culpability of large power companies.

Power companies are aware of the need to harden and prepare their networks for these potentially dangerous situations and we have some recent examples of responsible management.

This article from May 2024 makes interesting reading. In effect a small New Zealand company working with a university to manage solar storms.

But many power companies and grid managers don’t like to talk about this sort of thing – because it could involve criticism, cost, culpability. Not to mention share price value!

Another positive is that we also have “The space weather prediction centre” which utilises various satellites and ground based stations to monitor the sun and it’s predicted output.

Solar storms not only effect us on the ground – up in space things can get tricky and satellites often have to power down and maneuver them selves to avoid the worst of the storm. But this is tricky to get right. As recently as February 2022, Elon Musk’s Starlink company lost 38 satellites due to a geomagnetic storm.

One need also consider the effect on GPS systems with some flight, farming and radio systems being effected. This is a very sobering thought – and you might ask can modern jets fly and navigate without GPS (Makes mental note to check swpc site next time I fly)!

So you might ask how might SMB companies prepare for such an event?

Well the short answer is to back up! A Faraday cage for an off site version of that back up would be a very good investment, as well as knowing how long it would take you to re build your server from scratch.

Also if you depend on the cloud to host your data – do you know where that data is physically located? It might be a good idea to have at least a backup located on the other side of the planet – if not a data mirror, or fail over option – again on the other side of the planet.

The internet was designed to survive even if we have a nuclear war, so connectivity may be available but don’t count on it.

In a worst case scenario you would probably lose some data but not all – and you would be able to re-establish systems once the storm had cleared.

Although expensive – another option is traditional insurance, but that may be a very deep and litigious rabbit hole!

It’s at moment s like this that I like to quote my favourite character from the Incredibles  movie, Edna Mode “Luck favours the prepared darling!” Also it may be a good idea if your running something that’s very important…  to keep an eye on the SWPC site!

Related links in full.
https://assets.lloyds.com/assets/pdf-solar-storm-risk-to-the-north-american-electric-grid/1/pdf-Solar-Storm-Risk-to-the-North-American-Electric-Grid.pdf

Space weather prediction center
https://www.swpc.noaa.gov/

Transpower Link
https://www.transpower.co.nz/news/transpower-restores-electricity-transmission-circuits-after-solar-storm-subsides

Banging on about backup!

A sad story!
I knew this lovely young woman once who used to work at my local supermarket. We would chat and talk and then she disappeared for a while… she gone and had a child! Then about 6-7 months after this I went in one day and she was some what flat emotionally, I asked her if she was alright?

She said no someone had stolen her phone and it was not backed up. It also had the first 6 months of her child’s / family photographs on it.

A better story
A long time ago back when we had zip drives were a thing, and I did hardware work I had someone come in with a computer that had been used to write a thesis and it (and in-particular the thesis)  had never been backed up!

It took me 3 hours sitting with the client next to me to get the machine up and working again and then to back the thing up to a zip drive. We were both covered in sweat by the time we sorted this problem out but we did it! But it was a close run thing, that could have cost this person thousands of dollars not just the 300 odd dollars that we charged her.

But you can’t always get data off a failing device… and theft of a device that has not been backed up is just sad.

So I suppose this is another of my rants and pleads that you back up your data! Find a way! Do it now!

How long is your backup!

Computers screensRestoring backups can take some time! A number of years ago we had a NAS die on us. That was ok because we had it backed up on tape! (you know where this story is going?) Well the restore worked ok, and we were lucky because we could grab what we needed and then worry about the rest later…. but it took well over a week (and a lot of stuffing tapes into a machine) to get that thing  up and running again.

I helped a friend back up her laptop the other day – we used a usb3 drive that had an ssd installed – it took about an hour to restore 6-7 hundred gig’s worth of data. How much data do you have?

One element of contemporary Cyber Security is to have multiple backups so that if you don’t want to pay all that bitcoin to the bad guys, you just start with a new machine (or wipe the old one, if your brave enough) and start from backup.

The problem is of course is that if your whole network or 70 of your machines are now large bricks? How long is that process going to take and how much human power are you going to need to get things running again? Not to mention the cost.

A couple of things to consider is Cyber liability insurance. (although this is still not going to help if your public reputation is part of the issue)

A very good disaster recovery plan that is regularly tested and paid for as part of the on going company budget. The frustrating thing of course is that we hope that you never need this (just like dental work) we hope that things are going to be just fine and all. But hey – stay safe on the inter-webs people…. and maybe consider how long that backup / restore process takes.

If you want to read more about the horrors of being hacked and ransome ware and further discussion of the backup process this article from Brian Kerbs is well worth the read.

 

https://krebsonseurity.com/2021/07/dont-wanna-pay-ransom-gangs-test-your-backups/