Thought I would forward the below onto the list. Not sure if we have a
university policy in place to adequately address this sort of security
hole.
-----Original Message-----
From: [log in to unmask] [mailto:[log in to unmask]] On Behalf
Of Jeremy Moskowitz
Sent: Tuesday, May 25, 2010 3:10 PM
To: Al Puzzuoli
Subject: GPanswers.com: Scared the pants off of me
Now that I've got your attention with that festive image..
I came across this little piece of reporting by CBS news.
I have to admit.. I was totally caught off guard by this one.
Seems "gobsmackingly obvious" now that I think about it. But I never
did.
This is a report on how all the major brands of copiers STORE the images
on local hard drives. Making it SUPER EASY for the bad guys to get your
(recycled) copiers and get your important corporate data. Watch this,
then, please, figure out who to contact in your company and decide HOW
your copy machines are recycled.
https://moskowitzinc.infusionsoft.com/link/2fe750dfe0/b28720
What else can you do? Well, from a Group Policy perspective, on our
Windows PCs (and not copy machines) here are three ideas:
Idea 1:
Computer Configuration | Policies | Administrative Templates ... |
System | File System | Enable NTFS pagefile encryption
Idea 2:
"Clear Page File at Shutdown"...
Check out http://support.microsoft.com/kb/314834
(not a group policy setting, but can be delivered as a registry
preference.)
PS: This one likely wouldn't beat the forensics apps, but it's better
than nothing.
Idea 3:
You could of course, go "Full disk encryption" like BitLocker or
TrueCrypt.. that would do the trick as well.
So, that's three things to at least CONSIDER in thoughts around this
problem for high security machines that COULD be recycled. True.. I've
seen companies that literally "shred" the drives in a big "drive
cruncher machine".. but, that seems extreme considering there are
software solutions to this very problem.
Note, of course, that enabling these items could slow down your system
(especially that second one at shutdown time.) But it might be worth it
depending on the situation. For what it's worth, I'm using BitLocker on
one machine, TrueCrypt on another and notice no appreciable slowdown.
Speaking of security, and "doing all you can" to thwart the bad guys...
I'm doing my weekly PolicyPak demonstration tomorrow at 2.00 PM Eastern.
If you want "extra thumbscrews" to ensure that your security is
maintained at all times, then join me for this free informative talk.
Here's the link:
www.policypak.com/demo
Thanks.
PS: And my pants are already back on, thank you very much.
Jeremy Moskowitz
GPanswers.com (Group Policy Community)
PolicyPak.com (PolicyPak Software)
-Remove from Newsletter
https://moskowitzinc.infusionsoft.com/opt?o=6&i=148&m=85088&e=f8758e79
PolicyPak Software / GPanswers.com / Moskowitz, inc. 215 Christian
Street Philadelphia, PA 19147 United States
|
