5 ms·
I've seem a similar mistake nearly been made. There was a printer (the big, one cubic meter, enterprise type) in a sensitive air-gaped network that was not use
by kakwa_ 8y ago
I've seem a similar mistake nearly been made.
There was a printer (the big, one cubic meter, enterprise type) in a sensitive air-gaped network that was not used anymore, and there was a plan to reuse it on the main network.
It was nearly installed when I saw it and mentioned that these things have hard drives in them to my Security Officer over a coffee.
It was promptly removed after that.
This organization was quite conscientious about this kind of stuff, every disks was labeled, regularly inventoried and crushed in presence of the Security Officer when not used anymore.
But these printers can easily be mismanaged as people don't realize they are basically computers that see tons of information.
- golergka 8y agoThat seems like a highly unusual organization in terms of how well it manages it's security and how seriously does it take it. Does it specialize in it?
- kakwa_ 8y agoIf you are touching sensitive systems, like military infrastructure, nuclear power plant, law enforcement, banks, it's not uncommon at all. In some cases, mostly governmental stuff, you can be personally liable if you misplace accidentally documents or other sensitive pieces of information (like a spending a few years in prison).