Data Tapes Lost? Don't Worry About It...
from the let-it-go dept
With so many stories recently about lost, unencrypted backup data tapes, one security analyst is pointing out why you shouldn't really worry. First of all, if someone really wants to steal a lot of data from a company, there are much more effective ways to go about it. However, in cases where the data tapes are simply lost, it's quite unlikely anyone who finds them can actually access and use the data. First, the tapes are often quite fragile, so if they're sitting around, there's a good chance that the data may have decayed. Then, even if the data is on there, it won't be clear to anyone what's actually on the tape or how to access it. So, while it's still problematic that these tapes aren't more well protected, the actual risk from a lost tape is pretty low.
Thank you for reading this Techdirt post. With so many things competing for everyone’s attention these days, we really appreciate you giving us your time. We work hard every day to put quality content out there for our community.
Techdirt is one of the few remaining truly independent media outlets. We do not have a giant corporation behind us, and we rely heavily on our community to support us, in an age when advertisers are increasingly uninterested in sponsoring small, independent sites — especially a site like ours that is unwilling to pull punches in its reporting and analysis.
While other websites have resorted to paywalls, registration requirements, and increasingly annoying/intrusive advertising, we have always kept Techdirt open and available to anyone. But in order to continue doing so, we need your support. We offer a variety of ways for our readers to support us, from direct donations to special subscriptions and cool merchandise — and every little bit helps. Thank you.
–The Techdirt Team
Reader Comments
Subscribe: RSS
View by: Time | Thread
Is this really an issue?
I would look into my procedures a little more if this was a concern.
[ link to this | view in chronology ]
Re: Is this really an issue?
We encrypt ours with DES-128 it is monitored during the transfer.
BTW - the analyst is:
http://www.enterprisestrategygroup.com/
Avoid them - they have the wrong priorities.
[ link to this | view in chronology ]
No Subject Given
Additionally - did anbody stop to think that when you don't know where your backup tapes are - that you can't assume they are 'Lost'? They may have been targeted and stolen...
- Your Paranoid Security Practioner
[ link to this | view in chronology ]
Re: No Subject Given
In fact they probably know exactly how to access it from the get go...
[ link to this | view in chronology ]
I can see it now...
We hope that they weren't stolen.
We hope that whomever has them does not have the means to read them.
We hope that they have decayed beyond readability.
We hope that our customers don't find out.
We hope that we don't get sued.
First I worried about spam, but nobody listened...
Then I worried about spyware, but nobody listened...
Now I worry about privacy - and nobody is listening.
[ link to this | view in chronology ]
tapes are hard to access?
[ link to this | view in chronology ]
No Subject Given
[ link to this | view in chronology ]
To the Author of this Topic
[ link to this | view in chronology ]
Jon Oltsik -- Wow, just wow
Your managing editor really let you post this? Was there an editing process at all. Wow, just wow.
[ link to this | view in chronology ]
Data Loss - Critical Asset of any corporation
[ link to this | view in chronology ]
I can't believe it...
Would you continue doing business? Yes. People use Fleet...er...Bank of...er...whoever they are all the time!
If you've lost your tapes, you've lost your data restore. Huge problem rigt there.
Moreover, if you've lost a tape chances are you've used a backup program I can steal/purchase to read your data. Backup exec comes with a free trial.
If you've written data on media, I can recover it. Your only hope is to encrypt it and NOT let me know the key. Oh, and better make it a hard one- I'd hate to have to bust out some tools only to find that you used "key", "password", "1111", or "god" as a passphrase.
I am speaking hypothetically here, but not only is all of this theyoretically possible- in a disaster recovery scenario you have to assume this will be your only means of restoring data...forcing it out.
[ link to this | view in chronology ]
Re: I can't believe it...
It takes more effort to do backup if you encrypt, so they don't. Our backup time and media use doubled when we compared encrpting vs not encrypting.
You have to pay more to handle the offsite transportation of the media correctly, so it is not done. We use a salaried engineer monitoring the backup process and handling of the media.
In the long run, our customers pay less for our decisions.
[ link to this | view in chronology ]