Viewing profile — qual

> I don't understand why people ask for a definition. A quick search brings up many useful definitions Note how the definition there doesn't match any of the three definitions peop…

Thanks for taking the time to write this out, I think it helps me understand a bit better. Every definition seems to be sort of different and personalized but I think it's beginnin…

> Performative nonsense designed to appeal to emotions instead of doing something about the implied problem. (Guns and censorship, respectively.) Thanks! This helps me understand i…

> Note that I am not the one who brought up the term to the conversation. Of course, but since you said you were vehemently against it, I thought you'd be the better person to give…

(Not the person you were replying to) I'm curious what/how you define "woke culture", because the only definitions of "woke" I've ever heard are basically "thing I don't like" or "…

> If you know the hash of some data, then you either already have the data yourself, or you learned the hash from someone who had the data. From the article, you do not need to hav…

> Come on, this is not surprising. Very cool that it is not surprising to you. But to others (some are even in this thread!) it is both new and surprising. They unfortunately misse…

You're presenting this as if its a new idea, but the security industry tried the above (for the majority of the time that "computer security" has been a thing) and... it didn't wor…

Could you help me understand what you are suggesting is done instead? To me, it seems like you're suggesting that vulnerabilities are just left in play until someone malicious come…

> Your outrage sounds disingenuous. I've read through these comment chains a few times, but I'm having a really hard time finding the "outrage", disingenuous or otherwise. Can you …

> nobody's arguing that there are cases where you'd physically destroy a device, while cryptographic erasure of the data is not required as well. I am very explicitly saying crypto…

Sure, if you don't need to meet any compliance standards and your threat model is pretty relaxed, this is likely okay. But if your threat model is that relaxed, you can just encryp…

Wikipedia has it incorrect then, as they list it as "formerly web.com" ( "Network Solutions, LLC, formerly Web.com is an American-based technology company" ). Thanks for the clarif…

Most standards (e.g. ISO 27001, NIST 800-88) do allow for physical destruction without cryptographic erasure if the device is being shredded or incinerated (to the applicable shred…

Most data destruction compliance standards I am familiar with allow for cryptographic erasure when the device is encrypted prior to sensitive data being written to it (excluding so…

> I don't need to mind about this with encrypted data. I'm not sure if I wasn't clear or if you didn't read my comment correctly. Encrypting is not enough to prevent data recovery …

This isn't necessarily sufficient unless you encrypt the drives before any data is written to them. If any potentially sensitive data has been written to the drive prior to encrypt…