4 ms·
That's what I thought, but then why not just a USB with some basic encryption?
by LatteLazy 5y ago
That's what I thought, but then why not just a USB with some basic encryption?
- secfirstmd 5y agoDepends on how it was acquired. USB more traceable in some ways.
- ineedasername 5y agoThe question of "why not USB" is relevant regardless of what happened. Having sensitive printed documents traveling about like that isn't very secure. But I'm half joking about it being a dead drop. (Only half because the UK has been very deeply penetrated by foreign intel operations before) One explanation for USB vs. printouts, I guess it would depend on the security measures in place. The ability to use USB drives could be disabled in various ways to prevent bulk data removal while printing was still allowed. Or the reports were centrally printed out and distributed to various recipients, so it was never digitally accessible to the person who lost it.
- aYsY4dDQ2NrcNzA 5y agoThe question remains, because presumably the exfiltrator had the option of OCRing the paper docs, then encrypting those files.
- wrappingpaper 5y agoYou don’t want to plug USB sticks into a SUKEO network. Far too much hassle getting them from approved suppliers, making sure they’re not tampered with so on. Much easier to print documents and write a log of it up in a 102.