4 ms·
A question I've always wondered, and relevant here. If this is inter-company (and probably intra-company) communication, why don't these companies manually exch
by tempguy9999 7y ago
A question I've always wondered, and relevant here. If this is inter-company (and probably intra-company) communication, why don't these companies manually exchange one-time pads and use them? It's surely not hard for a courier to carry literally terabytes of OTP, and report if it was taken off them at any point.
I was thinking of tape or HD, but now you an have the courier carry a terabyte of OTP in a few USB sticks.
- munificent 7y agoLet's say you do that: 1. Send giant HD of OTP bits to other office. 2. Everyone at that office who needs to communicate, so you make those bits accessible on the internal network so various machines can get to it. 3. Now a hacker that accesses the network can get to your OTP bits. At that point, you're no better than using some other security mechanism.
- tempguy9999 7y agoOh FFS. I was expecting some silly answer involving couriers being intercepted but this is just as bad. > 3. Now a hacker that accesses the network can get to your OTP bits. Which is on an internal network so is not exposed (unlike the contents of a VPN which necessarily goes external) so can be more secure. While nothing's unhackable it adds an extra layer to break through. That the article says "It was very sophisticated and targeted the VPN which connected the company to Airbus" shows the VPN was the weak link, and not the internal networks. So harden the weakest link.