4 ms·
One more weak spot: if they have full access to the server, they can just dump the ram. This is incredibly simple to do on Linux for example. In a big company
by RyanZAG 11y ago
One more weak spot: if they have full access to the server, they can just dump the ram. This is incredibly simple to do on Linux for example.
In a big company though, having that one developer with full keys to the kingdom and is the only way to start up new servers is obviously out of the picture. Especially if the system works by having the keys on an easily stolen or damaged laptop...
- dspillett 11y agoThey keys would need to be much better looked after than that, of course. They just need to not be easily accessible from the machine they protect. You'd need a procedure in place so anyone with access to the relevant machines is able to obtain and use the keys as needed in an emergency. Being able to dump RAM pretty much breaks the protection that this offers though, as you correctly point out.