Home page logo

basics logo Security Basics mailing list archives

Re: How to Test HDD Encryption
From: Ansgar -59cobalt- Wiechers <bugtraq () planetcobalt net>
Date: Wed, 14 Nov 2007 17:13:22 +0100

On 2007-11-14 jfvanmeter () comcast net wrote:
True,  on a correctly acl'ed systems
I've seen acls on file systems that gave full user access from root
down, and windows systems that everyone had full rights too. I would
rather protect my clients NPPI/PII/PCI information with file encrytion.

For some reason you seem to assume that setting up a working file-level
encryption solution would be an easier task than setting up correct
ACLs. This assumption is wrong.

Ansgar Wiechers
"All vulnerabilities deserve a public fear period prior to patches
becoming available."
--Jason Coombs on Bugtraq

  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]