Robert Lemos, SecurityFocus 2005-04-28
In many cases, low paid workers are handling sensitive tapes, but only a small fraction of companies are securing the data with encryption.
Colapse all |
Post comment
Backups tapes a backdoor for identity thieves
2005-05-01
Anonymous
Anonymous
{"Two years ago, companies didn't get it," he said. "Now, all the people I know in this business are hearing interest from all quarters."} Or they were not interested at all even when such risks were pointed out to them. (Personal Experience)
Very few organisations look at themselves from the po...
[ more ] [ reply ]
Very few organisations look at themselves from the po...
[ more ] [ reply ]
A few observations
2005-05-02
Roger
Roger
"It is important to understand that unencrypted information stored on backup tapes is difficult to read, but it is not impossible," Richard Reese,
Say what? What's difficult about it? I suppose some proprietary systems are more obscure than others, but basically if you can't take a full backu...
[ more ] [ reply ]
Say what? What's difficult about it? I suppose some proprietary systems are more obscure than others, but basically if you can't take a full backu...
[ more ] [ reply ]
Backups tapes a backdoor for identity thieves - GLBA?
2005-05-02
Greg Hale
Greg Hale
While I agree that no legislation "specifically" deals with the issue of backup tapes, the Gramm-Leach-Bliley Act (GLBA) provides some privacy protections for consumers. I believe the FDIC could publish additional interpretations applying those protections without the Congress needing to get involv...
[ more ] [ reply ]
[ more ] [ reply ]
Backups tapes a backdoor for identity thieves
2005-05-02
Anonymous
Anonymous
Backup encryption = easy. Key Management easy. Many articles, like this one, have hailed the need for backup encryption because of recent events but fails to mention the very hurdle which prevents backup encryption from being implemented.
Financial institutions have a difficult enough time keep...
[ more ] [ reply ]
Financial institutions have a difficult enough time keep...
[ more ] [ reply ]
Backups tapes a backdoor for identity thieves
2005-05-05
Anonymous (1 replies)
Anonymous (1 replies)
While encryption of data for backups is a good idea, we are yet to see strong/universal support for hardware crypto accelerators from vendors - and software writers/vendors putting the senstive data into areas where it can be isolated (for encryption purposes) from the rest of the data.
The probl...
[ more ] [ reply ]
The probl...
[ more ] [ reply ]
Your crypto is old and slow!
2005-05-06
Roger
Roger
"a standard cpu will manage somewhere around 1-10Mbps - significantly less than the throughput of tape drives and networks."
Optimised modern crypto can do much better than that. Reasonably good implementations of RC4 on a 32 bit, 1.8 GHz machine do around 150 MB/s. That's B, not b, in other word...
[ more ] [ reply ]
Optimised modern crypto can do much better than that. Reasonably good implementations of RC4 on a 32 bit, 1.8 GHz machine do around 150 MB/s. That's B, not b, in other word...
[ more ] [ reply ]
Backups tapes a backdoor for identity thieves
2006-02-01
Simon Banks
Simon Banks
We have moved from tape backups to a secure offsite solution called FileSecure ,the software client encrypts files locally then sends them to a remote datavault over ssl. The encryption used is AES. The vaults are mirrored so we find it very redundant.
http://www.filesecure.net/
...
[ more ] [ reply ]
http://www.filesecure.net/
...
[ more ] [ reply ]
the only one i'm aware of is veritas netbackup - does anyone know any others?...
[ more ] [ reply ]