3 ms·
I think of the sensitive, air-gapped information as an infection. If an old and “infected” machine needs upgrading then it’s easier to put a new, freshly upgra
by gorgoiler 2y ago
I think of the sensitive, air-gapped information as an infection. If an old and “infected” machine needs upgrading then it’s easier to put a new, freshly upgraded machine into the infected area, copy the sensitive data over to the new machine, then incinerate the old one.
Anything that does come out of the infected area in-tact has to be cleaned or inspected carefully to ensure it is free of the “sensitive data” infection.
- vlovich123 2y agoThat would happen in a secure environment with auditors and multiple sysadmins who would have the ability to do things normally disallowed. Different threat model
- closeparen 2y agoAssuming the goal of the air gap is to prevent information getting out. Stuxnet was not about exfiltrating any data, just causing havoc.