So our main web server got ransomware'd.

By some miracle only a shared directory was compromised and not the whole server.

The server is on an end-of-life OS (Win Server 2008r2), no antivirus solution, no WAF, no log hardening or aggregation, so basically our Security MSP told us "lol good luck finding the attack origin, nuke it and rebuild it correctly this time"

Thing is IT leadership is like "Eh, no harm done, everything is fine" and want to sweep it under the rug and not report it to senior management.

How do i go about convincing them that this is actually important and for once in their life, they should give a fuck ? (This web server is the main moneymaker, it goes tits up and heads are gonna roll).

I am trying to reverse engineer a fingernail hardening device for rapid hardware prototyping (becoming some kind of hardware developer I guess)

Since it is a fucking mess (all cables are black) they've chosen a weird construct to operate microcontroller on 240Vac (seems to be possible and made in very low energy consuming devices) i do not find any datasheet for one of the used products. It would help a lot but no. And messing around with high voltage is no fun.

I'm unsure if this fits as a dev rant since most/all I've read so far are software-related.

!rant

Had to do a presentation today about os hardening on embedded devices and wanted to do a quick demo.

Forgot to make a sacrifice to the demo-gods and had to pay for it, nothing worked and i was struggeling with networking issues throughout my presentation :/

Worked perfectly 10 minutes ago as i was preparing and perfectly fine afterwards as the presentation was over...

Feeling really down and frustrated right now

What are your experiences with the demo gods?