3 ms·
> but why did there have to be a central server with the shared secret for every token on the planet? Yeah, this struck me as a huge flaw. The breached system
by mrandish 5y ago
> but why did there have to be a central server with the shared secret for every token on the planet?
Yeah, this struck me as a huge flaw. The breached system was used to create CDs full of IDs for customer deployment. For convenience the manufacturing system was almost but not fully air gapped. They retained the ID data in case the customer needed a copy in the future. However, keeping all of the IDs ever made on one system seems crazy.
If they had just deleted the data after backing it up to discrete offline media every week...
- mcfedr 5y agoIt's great that the system that was printing CDs somehow had to be internet connected, it's not like they are emailing these keys
- benlivengood 5y ago> If they had just deleted the data after backing it up to discrete offline media every week... Data loss probably scared them more than risk of breach. The real failure, after all, was not having the system actually airgapped. Aside from electromagnetic leakage through the power system there isn't much difference between spinning disks and tapes if they're not connected to anything else.