3 ms·
On a side note, this is why it's so important for these large companies to STOP sending attachments and instead used shared links to files (like via Dropbox or
by x0054 12y ago
On a side note, this is why it's so important for these large companies to STOP sending attachments and instead used shared links to files (like via Dropbox or equivalent). One way to do this would be to have a corporate wide email gateway that scans all emails, strips attachments, and converts them to hosted files. The gateway would replace the attachments with links to the same. This way, if something like this happens again, they can simply remove the hosted file or unshare it, no harm done.
- PeterGriffin 12y agoiCloud will offer this in the coming iOS / OSX releases.
- Alupis 12y ago> iCloud will offer this in the coming iOS / OSX releases. and... nobody cares.
- aviral 12y agoHow come they did not password protect the file? And send the password via other media, if the information is of that high importance.This is normal practice.
- x0054 12y agoThat's what we used to do when I worked in the medical industry. It works, but at least once a day I had to field phone calls asking me what the password to a file I sent 3 weeks ago was. Eventually we just had to switch to using just one file, which obviously reduces security significantly.
- rdtsc 12y ago> used shared links to files (like via Dropbox or equivalent) Wait, wouldn't that be sharing their data with Dropbox? If data is so sensitive, I don't see why is Dropbox necessarily more trustworthy than a random stranger with a gmail account. I if got a random email from GS with some brokerage account mumbo jumbo I would assume it is span and delete it. So would my mom and most friend and most people out there probably. Presumably if this "stranger" is random, one can make an argument that data would be safer with them then with a big cloud data aggregator (as that would be a single targeted point of attack). Ideally they should probably set up their own file sharing service with the ability to explicitly share some files externally (taking all the necessary security measures).
- joelrunyon 12y agoYou can revoke access to a shared dropbox file. You can also disable the shared links.
- rdtsc 12y agoYou can but not to dropbox. Dropbox still has access. That is the problem, isn't it?
- jackvalentine 12y agoIn this scenario Dropbox isn't actually being suggested as a solution, just as a model to get your head in the right space for understanding the solution.
- x0054 12y agoI assure you, I only used Dropbox as an example. Clearly a system like this should be implemented by the company it self. If it's important, you should store it on your own servers, and make sure that those servers are safe.
- deleted 12y ago[deleted]
- dublinben 12y agoThey wouldn't literally use Dropbox. There are similar services like ShareFile from Citrix that offer secure filesharing.