871–880 of 987 posts
Earlier quoted context omitted.
The US economy is one of the world's most diverse in terms of exports: https://oec.world/en/visualize/tree_map/hs92/export/usa/all/... Side note: Why is there so much fact-free anti-US sentiment on HN?
Orange man bad
Earlier quoted context omitted.
It is much more likely and cheaper, that US marines will desant and capture your backup facility, than someone would break AES-128.
Sending troops would be an act of war, and definitely not cheap. Stealing some encryption keys, just another Wednesday.
Earlier quoted context omitted.
> * Everyone involved is unlikely to find work again anytime soon once names are bandied about in investigations They might (MIGHT) get fired from their government jobs, but I'll bet they land in consulting shops because of their knowledge of how the government's IT teams operate. I'll also bet the internal audit team slides out of this completely unscathed.
> I'll also bet the internal audit team slides out of this completely unscathed. They really, really shouldn't. However, if they were shouted down by management (an unfortunately common experience) then it's on management. The trouble is that you can either be effective at internal audit or popular, and lots of CAE's choose the wrong option (but then, people like having jobs so I dunno).
Also, internal audit aren't supposed to be the only audit, they are effectively pre-audit prep for external audit. And the first thing an external auditor should do - ask them probing questions about their systems and process.
Earlier quoted context omitted.
Funnily enough, Germany has laws for where you are allowed to store backups exactly due to these kinda issues. Fire, flood, earthquake, tornadoes, whatever you name, backups need to be stored with appropriate security in mind.
Germany, of course. Like my company needs government permission to store backups.
Why wouldn't government mandate storage requirements given the above?
New caption:
> A firefighter wants to see the cool explosive reaction between water and lithium at the National Information Resources Service (NIRS) in Daejeon on Sept. 27. [YONHAP]
Earlier quoted context omitted.
> This is incredible. Government telling me how to backup my data. Incredible. No more incredible than the government telling you that you need liability insurance in order to drive a car. Do you think that is justifiable?
The difference is that you cannot choose who you're sharing a road with while you can usually choose your IT service providers. You could, for instance, choose a cheaper provider and make your own backups or simply accept that you could lose your data. Where people have little or no choice (e.g government agencies, telecoms, internet access providers, credit agencies, etc) or where the blast radius is exceptionally w…
You can choose where to eat, but the gov still carrier out food heath and safety inspections. The reason is that it isn't easy for customers to observe these things otherwise. I think the same applies to corporate data handling & storage.
Earlier quoted context omitted.
> I'll also bet the internal audit team slides out of this completely unscathed. They really, really shouldn't. However, if they were shouted down by management (an unfortunately common experience) then it's on management. The trouble is that you can either be effective at internal audit or popular, and lots of CAE's choose the wrong option (but then, people like having jobs so I dunno).
Which begs the question, Does N Korea have governmental whistle-blower laws and/or services? Also, internal audit aren't supposed to be the only audit, they are effectively pre-audit prep for external audit. And the first thing an external auditor should do - ask them probing questions about their systems and process.
Earlier quoted context omitted.
You and I can encrypt our data before saving it into the cloud, because we have nothing of value or interest to someone with the resources of a state. Sometimes sensitive data at the government level has a pretty long shelf life; you may want it to remain secret in 30, 50, 70 years.
I don't see how this is any different than countries putting significant portions of their gold & currency reserves in the NY Federal Reserve Bank. If for some reason the U.S. just decided to declare "Your monies are all mine now" the effects would be equally if not more devastating than a data breach.
Earlier quoted context omitted.
Why not?
As of today, there's no way to prove the security of any available cryptosystem. Let me say that differently: for all we know, ALL currently available cryptosystems can be easily cracked by some unpublished techniques. The only sort-of exception to that requires quantum communication, which is nowhere near practicability on the scale required. The only evidence we have that the cryptography that we commonly use is ac…
What kind of information might be valuable after so long?
Earlier quoted context omitted.
Embedded electronics, including from those countries, does not have an enviable reputation. :(
What about automobiles from Japan, Korea, and Germany? They are world class. All modern cars must have millions of lines of code to run all kinds of embedded electronics. Do I misunderstand?