5 ms·
This is not a helpful comment. Could you provide some examples of why it's a waste of money?
by stevenpetryk 7y ago
This is not a helpful comment. Could you provide some examples of why it's a waste of money?
- outside1234 7y agoWhen there is a will, there is a way.
- Scoundreller 7y agoAny output device is an output device. A VGA interface. An HDMI interface. A Scroll lock keyboard light. A hard drive interface. A speaker. All you need to do is send the signal down one wire and you could tap into that wire and copy all the data to another system. Copying files from one folder into another could do the job.
- Darkphibre 7y ago> ... A scroll lock keyboard light ... Oh, this was a fascinating read! Thanks for encouraging my perusal. http://staff.ustc.edu.cn/~zhangwm/Paper/2018_10.pdf http://staff.ustc.edu.cn/~zhangwm/Paper/2018_10.pdf
- Scoundreller 7y agoI brought it up because I had heard that the original iPODs ROM was extracted using the "click" sound and a microphone. I can't find any reference to it now... There is also research about using modem lights (even in the background of a room) to figure out what people are doing on their dialup internet connection. Those RX and TX LEDs are actually blinking at your data transmission rate.
- teraflop 7y agoHere's the iPod story: http://www.ipodlinux.org/stories/piezo/ http://www.ipodlinux.org/stories/piezo/
- dredmorbius 7y agoGeneralising further, signal, channel, reciever.
- cortesoft 7y agoNot the commenter, but I think the point is that there are simply too many ways to bypass protections. If you want someone to be able to view data, it is impossible to prevent them from exfiltrating it. In many ways it is similar to the analog hole problem with DRM. You can make it harder to do on accident, or to prevent someone from doing it for convenience (e.g. someone copying data to an insecure location to have easier access to do their job), but you can't stop a malicious actor from getting the data. They could tunnel over DNS, they could use a camera phone and record the data on the screen, etc. The possibilities are endless. https://en.wikipedia.org/wiki/Analog_hole https://en.wikipedia.org/wiki/Analog_hole
- dragonwriter 7y ago> You can make it harder to do on accident That's a major point of exfiltration prevention, both because accidents are a real problem and because reducing the opportunity for accidents makes it easier to establish that intentional exfiltration is intentional, which makes the ability to impose serious consequences for it greater (especially against privilege insiders with key contractual benefits that can only be taken away for cause.) Technical safeguards aren't standalone, they integrate with social safeguards.
- lixtra 7y ago>> You can make it harder to do on accident >That's a major point of exfiltration prevention But that’s not how it is advertised. Usually they claim is to catch hackers and mal intending employees.
- TeMPOraL 7y agoAdvertising is 100% bullshit, both in this space and elsewhere. I'm not sure why even well-paid people in positions of corporate power don't seem to get it. It's similar to Gell-Mann amnesia.
- azernik 7y agoIt's hard to prevent data exfiltration by an attacker with physical access to your premises, but it's much easier to prevent exfiltration (especially of large quantities of data) by compromised devices.