4 ms·
This is mildly surprising, because if your company wants to work in post production you need to pass a quarterly marvel/MPAA audit. Amongst the things specifie
by KaiserPro 10y ago
This is mildly surprising, because if your company wants to work in post production you need to pass a quarterly marvel/MPAA audit.
Amongst the things specified are:
o air gapped network
o All internet through a RDP/VDI service (no copy and paste..)
o all devices to be physically locked away
o all mass storage drivers to be removed
o Physical segmentation of all workspaces
o many other things
http://www.mpaa.org/content-security-program/ http://www.mpaa.org/content-security-program/
The other thing to note is that this is an audio facility, which is usually the last, or second to last point before release. It also by default has the whole film/show in one place, which outside of finishing and distribution is quite rare.
- dawnerd 10y agoNot necessarily post production but the security at Discovery Channel was pretty poor when I worked there. Massive open directory where everyone tossed files. Didn't want to snoop around and get in trouble but I heard from some people there it's pretty laughable. It didn't even require a login...
- golergka 10y agoIANAL, but I would never leave such a comment under a nickname that is tied to my real name - you are kind of disclosing their internal security procedures or lack thereof in a public forum.
- ianai 10y agoBah it's the Internet. Someone somewhere on the internet said something that could or could not be true. Because no one ever lied on the internet for fake credibility. I think that should be suitable defense enough.
- user5994461 10y agoIt's not a suitable defence if it's attached to your real name and you did work in the company you named.
- AndrewUnmuted 10y agoMost major film/TV organizations work in this manner, it's hardly a secret and anyone who's worked in post-production/distribution knows it.
- UnoriginalGuy 10y agoThat isn't illegal. What law do you think they violated?
- closeparen 10y agoDid you follow the link? MPAA's Best Practices are spelled out in explicit detail on a PDF linked from that page. It's a fascinating read.
- wheelerwj 10y agowhat does being a lawyer have anything to do with it?
- KaiserPro 10y agothe last VFX I worked for in 2014 was the only company to have no passwords for computer logins (email had passwords...) When I left, AD, 90 day password rotation, air gaps, RDP internet and no copy and paste. That made the google debugger rather hard (along with phone home licensing...)
- slackingoff2017 10y agoI like that their site talks about the importance of security yet doesn't even use HTTPS. Kinda makes you wonder about the guys running the show there.
- sandworm101 10y agoThe mpaa arent technology people. Their security wants are laughable, thier audits toothless. The contracts are scary to read but that's all they are. The film/tv industry is an open book for hackers. Password remain active forever. Accounts never close. Projects are extended and moved without thought to security. The average porn production studio is more secure against hackers than the average mpaa-contracted entity. The porn studio at least turns thier machines off when not in use.
- KaiserPro 10y ago> thier audits toothless Well, considering that virtually all VFX houses now have fully isolated networks (more or less), I'd say the audits are pretty effective. As an addendum, Most if not all leaks from VFX have been caused by "inside people" or drunk/coked producers leaving non-compliant laptops on planes.
- sandworm101 10y ago>>> "inside people" or drunk/coked producers leaving non-compliant laptops on planes. As I said, toothless. That such practices are allowed to persist demonstrates how inept their security is. Non-compliant laptops shouldn't exist. The audits miss them. For a group that champions DRM, they cannot keep track of who has access to what within their own houses.
- KaiserPro 10y agoSorry I should have been more clear, The people that leaked are not employees of the post house. They were people attached to the film it's self. The clients if you will. The security drive has been exceptionally effective in london and vancouver, not sure about LA.