3 ms·
I think symmetric encryption would be fine here for simplicity. When it's time to wipe the drive, securely erase the key. I'm curious as to who is responsible
by vczf 6y ago
I think symmetric encryption would be fine here for simplicity. When it's time to wipe the drive, securely erase the key.
I'm curious as to who is responsible for not properly erasing the files: the IT department, or the manufacturer. It could be that the station didn't wipe/reset the cameras before selling them. Or they only reinitialized the file system. Or the firmware's reset function only reinitializes the file system rather than shredding the contents.
- EvanAnderson 6y agoI just sat a sales presentation for a competitor's body cameras a few days ago. The cameras, in that case, are completely "black box" and no mention of threat models associated with the authenticity, confidentiality, or integrity of the data on the cameras was made. The particular cameras I saw pitched record continuously, and a "supervisor" is capable of accessing the raw buffer to extract video that an officer didn't otherwise flag as an "event" by way of a "password". I can only imagine that the information security story around all of this kind of hardware is probably pretty awful.