I agree that you should assume you’re being monitored, but, while that helps against malware type exfiltration, it does little to stop someone who is determined to exfiltrate the data as there are a myriad of ways to do so that aren’t possible to monitor, such as simply taking a video of the screen whilst displaying the information.
Ultimately, the company has to trust the employee or not give them access to the sensitive data, there’s no middle ground.
There is a fundamental issue with this approach: the rogue employee has already copied the data to a USB drive by the time you try to wipe it.
If the data is confidential, you either need to set up standard disk encryption and trust the employee, or not let them access it in a way it can be bulk copied. For instance, might it be possible for them to use a webapp that you control access to or a remote desktop type setup?
Further research shows that they blew everything up trying to deal with the ancient, insatiable, worms they released on themselves out of curiosity. Upon reflection, it is probably better that we didn’t arrive earlier.
We’ve got to leave something interesting for the alien xeno-archaeologists of the future to uncover.
I initially read that last sentence as “Hope his prostate collapses sooner than later.” and honestly couldn’t find a reason to disagree.
Even if they were surveilance drones they’d still be real, as opposed to mass hallucinations beamed into our visual cortexes by satellites. Of course, they’re not actually surveilance drones, that’s just a conspiracy theory started by the CIA to identify and monitor conspiracy ‘super-spreaders’ who can be used to spread whatever memetic trope the goverment of the day wants. No, really they genetically altered most plant species to act as resonant cavity bugging devices like The Great Seal. They monitor them with the same satellites they definately don’t use to beam out mass hallucinations.
/s of course, because, haha, that would just be silly, and I don’t want to be picked up and ‘reprogrammed’.
Oh birds are real. Very, very real. The question is, real whats?
Isn’t one of the main issues with carbon-monoxide that hemoglobin preferentially binds with it over oxygen, and so it doesn’t get expelled from your bloodstream via your lungs? You can tolerate quite large doses with little more than a headache, so I doubt you could overdose from internally generated amounts, but a large enough dose dangerously reduces your blood’s oxygen carrying capacity.
If you`re struggling to get jeans to a particular fit, you can get them custom made to your required measurements at https://www.makeyourownjeans.com/. They’ve got a good selection of fabrics, and I can recommend getting a gusset put in to significantly extend the life of the jeans.
I’m a satisfied customer but have no other affiliation with them.
Very gouda. You deserve a rind of applause for that one.
I’m using Hacker’s Keyboard, it’s got all the keys where I expect them. None of the others feel right, but the fact it hasn’t been updated in years does worry me. If anyone knows of a keyboard with a similar layout (separate number row, ctrl, esc, alt and cursor keys in place and the usual symbols as long press on the numbers) I’d love to try it out.
RussiaPutin is throwing their future away on the fields of Ukraine over a strip of land, it’s so mind-numbinglystupidevil.
Let’s face it, it’s a countries leader(s) that decide to feed their population into a meat grinder, not the people themselves. At this point there may ne little the average Russian can do to stop the process, at least, without significant retribution from the same government.
Interestingly, whilst Wikipedia does say that, the language in RFC 1591 (Domain Name System Structure and Delegation) only says:
There are a set of what are called “top-level domain names” (TLDs). These are the generic TLDs (EDU, COM, NET, ORG, GOV, MIL, and INT), and the two letter country codes from ISO-3166.
Likewise, in ICANN’s PRINCIPLES FOR THE DELEGATION AND ADMINISTRATION OF COUNTRY CODE TOP LEVEL DOMAINS, they say:
‘Country code top level domain’ or ‘ccTLD’ means a domain in the top level of the global domain name system assigned according to the two-letter codes in the ISO 3166-1 standard
In neither case do they actually limit two letter TLDs to being country codes, they only state that all country codes in ISO 3166-1 are ccTLDs. In the RFC, the author does suggest it is unlikely that any other TLDs will be assigned, but this has obviously been superseded with the advent of gTLDs. Thus I still consider it likely that the .io TLD will simply transition to being a commercial one, rather than a country one.
Having said all that, it’s entirely possible I’ve missed some more recent rule that tightens this up and only allows two letter domains from ISO 3166-1. If I have I’d be glad of a pointer to it.
You’re probably correct, but it’ll still have to be competitive with other TLDs, so it probably wont go too high.
It’ll get eliminated as a country code, yes, but that leaves it available as a generic TLD. Seen as it will be available and is obviously lucrative, someone will register it and, presumably allow domains to be registered under it. Off the top of my head, I think it costs $10,000 and you have to show you have the infrastructure to support the TLD you register, so an existing registrar is the most likely. That figure is probably out of date, it’s been many years since I checked it, but the infrastructure requirement is the more costly part anyway.
I very much doubt that the .io TLD will vanish, too many big companies use it. Seen as non-country TLDs are allowed, I suspect that as soon as the country code goes away an existing registrar will buy it and .io domains will carry on.
I enjoy reading dead tree books as much as anyone, and whilest the publisher/distributor can’t take it away, there are plenty of ways you can lose access to them. Fire and flood being the two obvious ones, whereas digital books can be backed up offsite. It’s also easier to carry many books when they’re digital compared to physical.
For books I care about I try to get both a physical and a (drm free) digital copy for the best of both world.
He just wants to be wanted by somebody. He was wanted for stealing a vehicle, so logically he stole another one so they would want him even more.
Tsk, everyone knows you shouldn’t use magnets to hold floppy disks. Just staple them into your lever arch file.
That’s fair, but the OP was talking about having the sensitive data directly on the laptop, which rather limits your ability to control access to it, and why I was suggesting keeping the data on a server and providing access that way, so limits can be put in place.
Your threat model probably isn’t the employee who suddenly goes rogue and tries to grab everything, but the one who spends and extended period of time, carefully, extracting key data. As you, the former can be be mitigated against, but the latter is very much harder to thwart.
That’s well set up, but, whilst your competitor would love the whole database, what they’re really interested in is the contact details and contract information for maybe your largest three customers. When the dataset to extract is small enough, even quite advanced rate limiting can’t really help much. Making sure no one person has access to all of the most valuable data is a good start, but can present practical problems.
I think we’re basically saying the same thing. The OP talked about putting all the sensitive information on the employee’s laptop, and that’s what I was trying to steer them away from.
In the past I’ve been asked if we can provide our developers access to pull the full source tree, but not copy it anywhere, and, to quote Charles Babbage, “I am not able rightly to apprehend the kind of confusion of ideas that could provoke such a question.”
I enjoy the security side of sysadmin work, but I find it rather depressing, as all you can hope to do is lose slowly enough that it’s not worth attacking you.