3 ms·
"According to city officials, the USB sticks contained sensitive information including names, birth dates, home addresses, tax details and bank account numbers.
by throwaway67743 4y ago
"According to city officials, the USB sticks contained sensitive information including names, birth dates, home addresses, tax details and bank account numbers. Due to the memory sticks’ password encryption, city officials were able to confirm that no attempts were made to access the drives."
An impossible to prove claim right there.
- ksaj 4y agoI assume they're using PKI and there has been no unexpected attempts to obtain key pairs. That may or may not be correct, but it is one possibility if that statement is accurate. It also may use 2FA before the drive can be mounted. Those are my best guesses.
- throwaway67743 4y agowhile I would hope so, this is rarely the case - its trivial to clone a usb key, even if its hardware encryption, and as this person freely copied it, it would appear policy is not in place (like denying usb devices in corporate machines). most "encryption" is either bitlocker or a numeric pin, which is very easily defeated. But also claiming no attempt has been made is impossible as they have no way of knowing if it was read, which was my point. The other obvious point is the Japanese are very deferential people, so it may be worse than admitted.