3 ms·
Not a panacea, but always required. All disks eventually are thrown out. It doesn't prevent all attacks, but it's the only way to prevent a very common class of
by scosman 8y ago
Not a panacea, but always required. All disks eventually are thrown out. It doesn't prevent all attacks, but it's the only way to prevent a very common class of attack.
- ummonk 8y agoYes, it's generally a good idea, even if it won't protect against most breaches. There are also certain types of encryption at rest where it buys you absolutely nothing though, e.g. using AWS' builtin encryption at rest for S3. No one is going to break into the AWS datacenter and steal the data from the physical disks.
- scosman 8y agoAWS decommissions hardware like anyone else. While I'm sure their processes include a secure-delete, no process is perfect and things are missed. It's worth setting the flag, especially since it's free.
- eeeeeeeeeeeee 8y agoReminds me of this story where a company went bankrupt and all the old servers were sold to the public but weren't securely erased beforehand: https://nakedsecurity.sophos.com/2018/09/24/bankrupt-ncix-customer-data-resold-on-craigslist/ https://nakedsecurity.sophos.com/2018/09/24/bankrupt-ncix-cu...