3 ms·
Yeah, but I'd rather not fight misunderstandings with misinformation. It's more true to say, like you do, that it's about loss of physical custody. But the pre
by knorker 10y ago
Yeah, but I'd rather not fight misunderstandings with misinformation.
It's more true to say, like you do, that it's about loss of physical custody. But the presentation said theft.
You are more correct in your phrasing, but even that doesn't cover my example of swapping hard drives around. If someone hacks the low security server and finds that it still has customer data in the unwritten blocks of the FS, or in remapped sectors, then that's not loss of physical custody, but it would have been prevented by FDE.
And honestly, who would not scan for deleted data after hacking a machine? It's not a tiny detail.
- tptacek 10y agoIf you have PII on a disk, and then you hand that disk to another organization not prepared to protect PII, you have surrendered physical custody of the PII. The distinction you're making is basically the same as the distinction between a thief cinderblocking your car window to steal your laptop, and you leaving your laptop in the back seat of a cab. Yes: FDE helps both if your drive is physically stolen, and if you physically lose it.
- knorker 10y agoIf you don't have FDE then you cannot erase PII, is my point. That hard drive is then forever tainted by PII. With FDE, that is not the case.