7 ms·

I'm surprised a plain floppy disk is considered secure because it is in an envelope. Even though that envelope requires an id to pick up, I see that similar as

I'm surprised a plain floppy disk is considered secure because it is in an envelope. Even though that envelope requires an id to pick up, I see that similar as a message in plaintext that has a header: private - please don't read.

oconnore 11y ago
https://en.wikipedia.org/wiki/Tamper-evident_technology https://en.wikipedia.org/wiki/Tamper-evident_technology
idlewords 11y ago
It's quite surprisingly secure because, apart from crazy Norwegian doctors, who on earth can read a floppy disk?
- deleted 11y ago
  [deleted]
- thaumasiotes 11y ago
  Absolutely anyone who wants to. http://www.amazon.com/Sabrent-External-Floppy-Drive-FL-UDRV/dp/B00E9MD700/ http://www.amazon.com/Sabrent-External-Floppy-Drive-FL-UDRV/...
  - zeckalpha 11y ago
    I have this exact drive. Amazon says: "You purchased this item on December 2, 2014."
- deleted 11y ago
  [deleted]
superuser2 11y ago
The Supreme Court puts email in the same legal category as postcards: little to no expectation of privacy, because everyone along the way can trivially read it. Certainly an envelope can be trivially bypassed, but the clear signaling of intent may be enough to sway the legal status of eavesdropping on it.
userbinator 11y ago
From another perspective, a floppy is also secure because it is a completely dumb storage device: it's just a piece of magnetic media in a plastic case. The drive is equally dumb, and the controller IC is usually a hard-wired logic array. The format has been around for a long time and publicly documented in standards. Contrast this with USB drives which have their own firmware and microcontrollers that can hide maliciousness, or even CD/DVD drives that also have modifiable firmware. Someone could intercept a floppy and read/write its data, but putting malware on it and getting the receiver to execute it unnoticed is going to be much harder than with a USB drive. Putting a floppy into a drive literally does not cause any code to execute - it's only when commanded to, i.e. when the drive is accessed, that things start happening. There's no AutoPlay for floppies. Contrast this with the whole USB enumeration process.
- Perdition 11y ago
  Most motherboards still prioritize floppy drives when it comes to boot order. The early viruses were transmitted by floppies. I also wouldn't trust a floppy controller's firmware any more than I would a CD or USB controller's firmware.
- jerven 11y ago
  Have you ever tried to intercept some one else's snail mail (or even your own wrongly delivered)? Its a lot of work if you don't have an insider at the post office. Requiring major time investments, to visit mail boxes or collect mail. E-mail even encrypted is much easier to permanently monitor than basic post, even for state level actors. Opening an envelope is easy, doing so without being detected day in day out is hard.
  - deleted 11y ago
    [deleted]
  - veddox 11y ago
    The (East) Germans managed - the Stasi (East German secret police) did so for years on end with any number of suspected citizens. Actually there was a joke going around here in Germany when the NSA scandal broke, talking about how jealous all the ex-Stasi guys must be that the NSA had beaten them at their own surveillance game...

oconnore 11y ago

https://en.wikipedia.org/wiki/Tamper-evident_technology https://en.wikipedia.org/wiki/Tamper-evident_technology

idlewords 11y ago

It's quite surprisingly secure because, apart from crazy Norwegian doctors, who on earth can read a floppy disk?

deleted 11y ago
[deleted]
thaumasiotes 11y ago
Absolutely anyone who wants to. http://www.amazon.com/Sabrent-External-Floppy-Drive-FL-UDRV/dp/B00E9MD700/ http://www.amazon.com/Sabrent-External-Floppy-Drive-FL-UDRV/...
- zeckalpha 11y ago
  I have this exact drive. Amazon says: "You purchased this item on December 2, 2014."
deleted 11y ago
[deleted]

superuser2 11y ago

The Supreme Court puts email in the same legal category as postcards: little to no expectation of privacy, because everyone along the way can trivially read it. Certainly an envelope can be trivially bypassed, but the clear signaling of intent may be enough to sway the legal status of eavesdropping on it.

userbinator 11y ago

From another perspective, a floppy is also secure because it is a completely dumb storage device: it's just a piece of magnetic media in a plastic case. The drive is equally dumb, and the controller IC is usually a hard-wired logic array. The format has been around for a long time and publicly documented in standards. Contrast this with USB drives which have their own firmware and microcontrollers that can hide maliciousness, or even CD/DVD drives that also have modifiable firmware. Someone could intercept a floppy and read/write its data, but putting malware on it and getting the receiver to execute it unnoticed is going to be much harder than with a USB drive. Putting a floppy into a drive literally does not cause any code to execute - it's only when commanded to, i.e. when the drive is accessed, that things start happening. There's no AutoPlay for floppies. Contrast this with the whole USB enumeration process.

Perdition 11y ago
Most motherboards still prioritize floppy drives when it comes to boot order. The early viruses were transmitted by floppies. I also wouldn't trust a floppy controller's firmware any more than I would a CD or USB controller's firmware.
jerven 11y ago
Have you ever tried to intercept some one else's snail mail (or even your own wrongly delivered)? Its a lot of work if you don't have an insider at the post office. Requiring major time investments, to visit mail boxes or collect mail. E-mail even encrypted is much easier to permanently monitor than basic post, even for state level actors. Opening an envelope is easy, doing so without being detected day in day out is hard.
- deleted 11y ago
  [deleted]
- veddox 11y ago
  The (East) Germans managed - the Stasi (East German secret police) did so for years on end with any number of suspected citizens. Actually there was a joke going around here in Germany when the NSA scandal broke, talking about how jealous all the ex-Stasi guys must be that the NSA had beaten them at their own surveillance game...