4 ms·

Note that encryption at rest isn't a panacea. Since every system that accesses the data needs to have the decryption key, if the hacker is getting the data by h

by ummonk 8y ago

Note that encryption at rest isn't a panacea. Since every system that accesses the data needs to have the decryption key, if the hacker is getting the data by hacking one of those systems, then the encryption at rest has achieved nothing.

r00fus 8y ago
> then the encryption at rest has achieved nothing That's a bit of an overreaction. It has at least guaranteed that the intruder has active keys on a relevant system that can access the data. It ups the ante with reasonable/minimal cost. Encryption at rest is a defense-in-depth approach allowing you to be sure that e.g. some random stolen backup image (perhaps of a 3rd party system) doesn't expose your etc/shadow or user tables for subsequent rainbow-table attacks.
germainelong 8y ago
This is so short sighted I can't believe you are serious and not trolling. Every precaution has its limitations but why give the attackers a free meal? Encrypted data protects from simple theft or loss of the device so a common thief won't leak the data.
- ummonk 8y ago
  You seem to be arguing against something I never implied. I said it's not a panacea. Do you disagree?
  - germainelong 8y ago
    You implied that encryption is optional whereas this shouldn't even be a discussion.
scosman 8y ago
Not a panacea, but always required. All disks eventually are thrown out. It doesn't prevent all attacks, but it's the only way to prevent a very common class of attack.
- ummonk 8y ago
  Yes, it's generally a good idea, even if it won't protect against most breaches. There are also certain types of encryption at rest where it buys you absolutely nothing though, e.g. using AWS' builtin encryption at rest for S3. No one is going to break into the AWS datacenter and steal the data from the physical disks.
  - scosman 8y ago
    AWS decommissions hardware like anyone else. While I'm sure their processes include a secure-delete, no process is perfect and things are missed. It's worth setting the flag, especially since it's free.
- eeeeeeeeeeeee 8y ago
  Reminds me of this story where a company went bankrupt and all the old servers were sold to the public but weren't securely erased beforehand: https://nakedsecurity.sophos.com/2018/09/24/bankrupt-ncix-customer-data-resold-on-craigslist/ https://nakedsecurity.sophos.com/2018/09/24/bankrupt-ncix-cu...

by ummonk 8y ago

r00fus 8y ago

> then the encryption at rest has achieved nothing That's a bit of an overreaction. It has at least guaranteed that the intruder has active keys on a relevant system that can access the data. It ups the ante with reasonable/minimal cost. Encryption at rest is a defense-in-depth approach allowing you to be sure that e.g. some random stolen backup image (perhaps of a 3rd party system) doesn't expose your etc/shadow or user tables for subsequent rainbow-table attacks.

germainelong 8y ago

This is so short sighted I can't believe you are serious and not trolling. Every precaution has its limitations but why give the attackers a free meal? Encrypted data protects from simple theft or loss of the device so a common thief won't leak the data.

ummonk 8y ago
You seem to be arguing against something I never implied. I said it's not a panacea. Do you disagree?
- germainelong 8y ago
  You implied that encryption is optional whereas this shouldn't even be a discussion.

scosman 8y ago

Not a panacea, but always required. All disks eventually are thrown out. It doesn't prevent all attacks, but it's the only way to prevent a very common class of attack.

ummonk 8y ago
Yes, it's generally a good idea, even if it won't protect against most breaches. There are also certain types of encryption at rest where it buys you absolutely nothing though, e.g. using AWS' builtin encryption at rest for S3. No one is going to break into the AWS datacenter and steal the data from the physical disks.
- scosman 8y ago
  AWS decommissions hardware like anyone else. While I'm sure their processes include a secure-delete, no process is perfect and things are missed. It's worth setting the flag, especially since it's free.
eeeeeeeeeeeee 8y ago
Reminds me of this story where a company went bankrupt and all the old servers were sold to the public but weren't securely erased beforehand: https://nakedsecurity.sophos.com/2018/09/24/bankrupt-ncix-customer-data-resold-on-craigslist/ https://nakedsecurity.sophos.com/2018/09/24/bankrupt-ncix-cu...