Web lists-archives.com

Re: Password policy.




On 15/11/18 4:51 AM, Brian wrote:
>> How about:
>>
>> 3. They had physical access to the drive in question (or any backup) and
>> that data wasn't encrypted (LUKS for example).
>> [boot machine with live boot USB, mount root file system and steal the
>> file, remove live boot USB, allow machine to startup normally]
> You know what is said about physical access? This is 1. in disguise.

Mistakes happen. Scenarios fail to occur to people.

Go for defence in depth.

Richard

Attachment: signature.asc
Description: OpenPGP digital signature