[Dataloss] time to name names (was Re: MORE BNY (Mellon Corp) Tapeslost)

[DAIL, WILLARD A]

Aside from the privacy issue, couriered tapes  are also a concern due to the "Crash Restart" method of system attack. 

Basically, a hacker colludes with your courier to drop off your tapes in the morning.  The courier then picks up the altered tapes that afternoon.  A couple of really nasty things happened to your tapes that day. 



________________________________

From: dataloss-bounces at attrition.org on behalf of security curmudgeon
Sent: Fri 6/6/2008 3:24 PM
To: dataloss at attrition.org
Subject: [Dataloss] time to name names (was Re: MORE BNY (Mellon Corp) Tapeslost)





: http://www.pittsburghlive.com/x/pittsburghtrib/business/s_570347.html
:
: "The tape was being carried by a commercial carrier ... and was lost in
: transit," said Ron Sommer, at the bank's Downtown offices. "It was
: ground transportation delivery, and it didn't reach its destination."

The amount of data loss incidents due to backup media being lost in
transit is disgusting. While everyone looks to the oragnizations like BNY
for these incidents, they need to disclose which commercial carriers are
losing the data like this.

I want to see the data and determine if a specific carrier or service is
primarily at fault here if that is where the blame lies.
_______________________________________________
Dataloss Mailing List (dataloss at attrition.org)
http://attrition.org/dataloss

Tenable Network Security offers data leakage and compliance monitoring
solutions for large and small networks. Scan your network and monitor your
traffic to find the data needing protection before it leaks out!
http://www.tenablesecurity.com/products/compliance.shtml



This message and any files transmitted with it is intended solely for the designated recipient and may contain privileged, proprietary or otherwise private information. Unauthorized use, copying or distribution of this e-mail, in whole or in part, is strictly prohibited. If you have received it in error, please notify the sender immediately and delete the original and any attachments.