3 ms·
Yes, the argument for not having disk encryption is completely bogus. Disk encryption protects against disposal or theft of physical storage. Companies like T
by MattPalmer1086 4y ago
Yes, the argument for not having disk encryption is completely bogus.
Disk encryption protects against disposal or theft of physical storage. Companies like Twitter will be replacing disks all the time.
The argument that nothing less than an end-to-end encrypted system is worth doing is also flawed. No, don't lock the windows and keep leaving the key under the mat, since we don't live in a castle.
He attacks cyber activists for blocking business because security is not perfect. It seems he would rather have no security if it isn't perfect.
- LinuxBender 4y agoAdding to this, vendors like HP and Dell have a "keep your disk" option/policy so that you can have disk shredding vendors physically destroy the faulty disks. It costs more up front but is a high value option for some financial companies. I was in a company that had this policy with over 50k servers around the world and it gave the customers more confidence in our security and simplified part of our security audit. The shredding vendors recycle the material. I should add that our customer data was encrypted at-rest but we shredded the disks to remove any doubt that on-demand debug logging potentially leaked sensitive data. New managers and directors thought this was a waste of money but as the sales people could attest to, this process paid for itself many times over.