3 ms·
>For example, if your CT scan software was made for Windows XP There are best practices for dealing with out of support equipment that are exceptional edge cas
by drzaiusapelord 9y ago
>For example, if your CT scan software was made for Windows XP
There are best practices for dealing with out of support equipment that are exceptional edge cases. Segregation and isolation from the network being the top ones. Having them sit with the smb service listening on the local subnet is completely inexcusable and a sign of incompetence.
- kevindqc 9y agoHow do people get their files out of isolated computers? For example if someone does a CT scan and needs the upload the results to the patient's file? Use a USB key? I think that's what my boyfriend does with his driving simulator at work that still runs Windows XP. But aren't USB keys just another vector?
- solatic 9y agoThere are unidirectional security gateways that only allow data to flow in a single direction. The legacy hardware creates a file, and copies it to a directory managed by the gateway. The gateway then copies it to some data dump on the other side, onto an updated and centrally managed part of the network. Barring some vulnerability in the gateway, passing data in the other direction is impossible.
- kevindqc 9y agocool, thanks
- drzaiusapelord 9y agoYou just have those files rsync to a file server and then the client PCs connect to that file server. They should never ben connecting to the XP box directly as its firewall'd off to only be able to speak to the file server.