4 ms·

Have you ever seen an organization that secured valuable data effectively? I don't mean one where they followed some standards or had the right policy, but whe

Have you ever seen an organization that secured valuable data effectively? I don't mean one where they followed some standards or had the right policy, but where, as implemented by IT and as practiced by users and admins, the data was secured so well that attackers would not steal the data - where it was too difficult to be worthwhile. I mean an organization you know intimately, where you know how the sausage is made. Generally, the reality I've seen is security through obscurity.

AndrewKemendo 11y ago
Classic and common modus tollens. That you don't know of one does not mean they don't exist. But to your question yes, I have seen one. It all hinged on people actually internalizing security measures such that it was part of how they lived their lives.
walshemj 11y ago
I used to work for a major telco and any sensitive lines here monitored looking up C or Liz II's telephone details would ring a lot of alarms. And then you and had better hope MI5 got to you before BT's internal security did. The fact that the DCI's details where not secured is shocking the CEO, Chairman head of security should be fired. Id probably fire the entre call centre shift to make the point as well.
- hackuser 11y ago
  Haven't the news media hacked into royal family phones, voicemail, etc. multiple times? Maybe that wasn't via BT.
  - biot 11y ago
    The news media don't have access to British Telecom's internal systems, so any hacking they do is outside of internal security controls. Here, BT != bluetooth (which may indeed be the attack vector for many hacks).
    - walshemj 11y ago
      There are rumors that tabloids have physically hacked into CAB's (street boxes) to tap lines the old fashioned way - probably using bent linesmen.
  - walshemj 11y ago
    That was mobile voicemail And back in 92/93 there was an instance where a journalist got a tempory job in Edinburgh and looked up a private line at hollyrood. After that they got very serious about security lead devlopers on some systems have to be DV Vetted now. btw DV is the same roughly as TS clearance.

AndrewKemendo 11y ago

Classic and common modus tollens. That you don't know of one does not mean they don't exist. But to your question yes, I have seen one. It all hinged on people actually internalizing security measures such that it was part of how they lived their lives.

walshemj 11y ago

I used to work for a major telco and any sensitive lines here monitored looking up C or Liz II's telephone details would ring a lot of alarms. And then you and had better hope MI5 got to you before BT's internal security did. The fact that the DCI's details where not secured is shocking the CEO, Chairman head of security should be fired. Id probably fire the entre call centre shift to make the point as well.

hackuser 11y ago
Haven't the news media hacked into royal family phones, voicemail, etc. multiple times? Maybe that wasn't via BT.
- biot 11y ago
  The news media don't have access to British Telecom's internal systems, so any hacking they do is outside of internal security controls. Here, BT != bluetooth (which may indeed be the attack vector for many hacks).
  - walshemj 11y ago
    There are rumors that tabloids have physically hacked into CAB's (street boxes) to tap lines the old fashioned way - probably using bent linesmen.
- walshemj 11y ago
  That was mobile voicemail And back in 92/93 there was an instance where a journalist got a tempory job in Edinburgh and looked up a private line at hollyrood. After that they got very serious about security lead devlopers on some systems have to be DV Vetted now. btw DV is the same roughly as TS clearance.