3 ms·
> Arguably, customer data should not leave a secure location on a physical disk. Okay, let's argue. Under what threat model is it a problem to transport sensit
by yjftsjthsd-h 2y ago
> Arguably, customer data should not leave a secure location on a physical disk.
Okay, let's argue. Under what threat model is it a problem to transport sensitive data on encrypted disks?
- forty 2y agoMaybe "they can replace the disk firmware during transport while the driver was peeing" kind of attackers?
- yjftsjthsd-h 2y agoThat doesn't have anything to do with the customer's data and isn't helped by the suggestion of wiping the drives before transport. The data is encrypted no matter what happens to firmware; that is at best a way to compromise the server(s) after transport.
- spydum 2y agoIf the device is lost or stolen during transport physically, all it takes is the attacker to gain control of the key, or find a weakness in that firmware or encryption method. While those are stupidly improbable, the reality is once you lose physical custody, the attacker has a lot more options.