crucially though... Is anyone aware of an event like this - high profile or
otherwise - in which the affected company was primarily IT based or the
responsible employee was a developer.  If so, was it the case for that
particular event that a more stringent security lock down would have been
effective in its prevention?

On 2 March 2010 13:56, Phil <[email protected]> wrote:

> >
> > Encrypted harddrives?  Sounds like a clueless exec paranoid about IP.
> > Almost no code IP is worth anything to an outsider.  Seriously, who is
> > going to bother to try and figure out a competitor's code-base?
> > Sounds like a huge PITA to me.  For a CFO/CEO, I can understand
> > wanting to have an encrypted HD.  BTW, the overhead of encryption on a
> > dev machine is very high.
> >
>
> In 2007 there were a series of very embarassing, high profile data
> loss events in the UK: the Inland Revenue lost some unencrypted CDs
> with the tax and bank account details of over 10 million people. A
> contractor for the prison service lost a memory stick containing the
> personal details of prisoners due for release. A hard drive containing
> details of UK driving licence holders went missing in a data centre in
> the USA.
>
> As a result all the big consultancies accellerated their adoption of
> full drive encryption as a result, for all machines, as a way to
> mitigate against lost and stolen hardware. No, this wouldn't have
> prevented the first two events because people did not follow their
> employer's/customer's processes. It highlighted the degree of legal
> exposure though and the reaction was predictable.
>
> I did develop on a machine running full drive encryption for about
> nine months and I have to say that steady state performance was about
> the only thing we didn't complain about. Our biggest problem was the
> regularity with which the full drive encryption would fail, bricking
> the machine as a result and taking a couple of working days to get
> desktop support to get involved and run the decryption software. The
> bricking rate was as high as 20% in the early days.
>
> --
> You received this message because you are subscribed to the Google Groups
> "The Java Posse" group.
> To post to this group, send email to [email protected].
> To unsubscribe from this group, send email to
> [email protected]<javaposse%[email protected]>
> .
> For more options, visit this group at
> http://groups.google.com/group/javaposse?hl=en.
>
>


-- 
Kevin Wright

mail/google talk: [email protected]
wave: [email protected]
skype: kev.lee.wright
twitter: @thecoda

-- 
You received this message because you are subscribed to the Google Groups "The 
Java Posse" group.
To post to this group, send email to [email protected].
To unsubscribe from this group, send email to 
[email protected].
For more options, visit this group at 
http://groups.google.com/group/javaposse?hl=en.

Reply via email to