My G+ Profile
« BYU RUG Report | Main | Lightweight Identity Systems »
Viruses, P2P, and Privacy
The Japan Time is reporting that the names of 10,000 Japanese convicts have been leaked from an employee’s personal computer that was infected by a virus from the P2P program Winny.
The information was initially stored on a CD by a staff member at Kagoshima Prison and handed to a staff member of Kyoto Prison in December.
That employee left the CD in a personal computer. The data was leaked after the computer was infected with a virus via the peer-to-peer file-sharing program Winny, which had been installed on the computer, the officials said.From The Japan Times Online - Advanced Search -
Referenced Mon Feb 13 2006 18:21:11 GMT-0700 (MST)
The only way for an enterprise to secure data is to make sure it’s only kept in an authroized location. Once it’s on an uncontrolled CD or even a laptop or PDA, you might as well assume that it’s leaked.
Posted by Phil Windley on February 13, 2006 6:19 PM
2 Comments
Buy My Book
I'm CTO of Kynetx
Dates for IIW
IIW XIV - May 1-3, 2012
IIW XV - Oct 23-25, 2012
IIW XV - Oct 23-25, 2012
Loading tweets...
Free Newsletter!
Search
Digital Identity
Upcoming Events
Staying home
Comment from gmlk at February 14, 2006 2:41 AM
You may want to consider that you (by default) need to store all data in an encrypted form [1] physically separated from the key.
That way you can make as many backup copies as required and even give nearly anyone the ability to copy the files, but only those who have the proper keys are able to use the data.
Then you only need to manage the keys (much simplere because fewer data). Also deleting a key, would delete all the data locked with this key: Even remote offline backups can so be deleted.
[1] http://gnupg.org
Comment from Osoblanco at February 14, 2006 10:24 AM
Until these security and privacy issues can be covered with appropriate software/processes, why is it acceptable to download any sensitive information to any portable medium, corporate or personal? Nothing is so encryptible as to be safe when one has unlimted time and access to work on finding the key to access the data.