OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: [Dataloss] (article) "We recovered the laptop!" ... so what?

From: sawaba (sawabaforced.attrition.org)
Date: Mon Feb 19 2007 - 22:18:05 CST


Indeed, the M of N feature is for key recovery only. All disk encryption
solutions I'm familiar with are most vulnerable when they are up and
running. At that point, you're heavily dependant on your other security
controls.

--Sawaba

On Sat, 17 Feb 2007, Adam Shostack wrote:

> I do't believe that's effectively multi-person control of the data in
> the fashion that your nuclear launch analogy evokes. It may be
> multi-person or multi-factor initilization, but once the system is up
> and running, there are in-memory processes which have access to all
> the data on the disk.
>
_______________________________________________
Dataloss Mailing List (datalossattrition.org)
http://attrition.org/dataloss
Tracking more than 149 million compromised records in 580 incidents over 7 years.