2 ms·
Physical security is a joke everywhere. I've worked in 50+ datacenters and I'd bet anyone anywhere that I could sneak a 64GB micro SD card out of any datacenter
by staunch 13y ago
Physical security is a joke everywhere. I've worked in 50+ datacenters and I'd bet anyone anywhere that I could sneak a 64GB micro SD card out of any datacenter in the world. No one is doing cavity searches, not even NSA. Getting a "decommissioned" or "test" server out full of data would be trivial in 99.99% of organizations.
Theoretically it's trivial to audit sysadmins. In practice it's virtually impossible. Let me know when Red Hat wants to bet money on it.
- stephengillie 13y agoRed Hat doesn't sell physical security. Let me know when ADT wants to bet money on it.
- staunch 13y agoRed Hat doesn't offer a real world solution to the problem of auditing sysadmins. That's entirely my point.
- dedward 13y agoI'm pretty sure I recall hearing the NSA never lets anything leave their facilities intact when decomissioning or otherwise disposing. I've heard a story of brand new very expensive servers (big Sun machines I think) sitting in a loading dock, still on pallettes, having the project cancelled and having them destroyed unused rather than risk data leaving the building.
- staunch 13y agoI'm sure they have great policies. I'm also sure they're regularly not followed or easily bypassed by certain people. Who exactly destroys the servers, for example?