Monday, March 5, 2012

The problem with computer security

It has nothing to do with Best Practice.  Rather, it concerns the woefully low Typical Practice.  Like this:
A NASA laptop stolen last year had not been encrypted, despite containing codes used to control and command the International Space Station, the agency's inspector general told a US House committee.
*Headdesk*

Technology isn't the problem.  Measure with a micrometer, mark with chalk, cut with an axe.

Via email from ASM826.

6 comments:

  1. That GuyMarch 5, 2012 at 10:35 AM

    The Human factor is the biggest hole in all computer security. In my work, we see people all the time purposefully screw up things like passwords, encryption, physical security, etc... and we are called to solve the problem.

    Yep. All those theories and best practices sound great until some end user screws things up.

    ReplyDelete
  2. NorthMarch 5, 2012 at 11:01 AM

    Lamenting that a chain is only as strong as its weakest link is senseless if you are trying to tow your car with a gold necklace.

    ReplyDelete
  3. Dave HMarch 5, 2012 at 12:45 PM

    Hey, it's NASA. It's not like they're working for the DoD. If they did they'd have procedures for keelhauling the offender.

    ReplyDelete
  4. DaddyBearMarch 5, 2012 at 4:30 PM

    I've yet to find a way to engineer around humans. Every day I make progress, but it Sysiphus had better odds of success.

    ReplyDelete
  5. AlanMarch 5, 2012 at 8:20 PM

    Good old social engineering will bypass any security system.

    ReplyDelete
  6. AnonymousMarch 6, 2012 at 11:56 PM

    The codes the article refers to are fairly useless unless you connected to the ISS C&C MDMs.

    ReplyDelete

Remember your manners when you post. Anonymous comments are not allowed because of the plague of spam comments.