Results 1 to 14 of 14

Thread: News - Encrypted USB Flash drive approved for "top secret" data

  1. #1
    HEXUS.admin
    Join Date
    Apr 2005
    Posts
    31,709
    Thanks
    0
    Thanked
    2,073 times in 719 posts

    News - Encrypted USB Flash drive approved for "top secret" data

    ViaSat reveals the Eclypt Nano range for corporate, public sector and government use.
    Read more.

  2. #2
    Gentoo Ricer
    Join Date
    Jan 2005
    Location
    Galway
    Posts
    11,048
    Thanks
    1,016
    Thanked
    944 times in 704 posts
    • aidanjt's system
      • Motherboard:
      • Asus Strix Z370-G
      • CPU:
      • Intel i7-8700K
      • Memory:
      • 2x8GB Corsiar LPX 3000C15
      • Storage:
      • 500GB Samsung 960 EVO
      • Graphics card(s):
      • EVGA GTX 970 SC ACX 2.0
      • PSU:
      • EVGA G3 750W
      • Case:
      • Fractal Design Define C Mini
      • Operating System:
      • Windows 10 Pro
      • Monitor(s):
      • Asus MG279Q
      • Internet:
      • 240mbps Virgin Cable

    Re: News - Encrypted USB Flash drive approved for "top secret" data

    If you're walking around with top secret material under your arm, you've just failed at security. If you're walking around with top secret material in your pocket, you've really failed at security. This stuff just shouldn't leave government offices, ever, period.

  3. #3
    Senior Member watercooled's Avatar
    Join Date
    Jan 2009
    Posts
    11,470
    Thanks
    1,540
    Thanked
    1,029 times in 872 posts

    Re: News - Encrypted USB Flash drive approved for "top secret" data

    Well since it seems to regularly leave in plaintext, I'd rather have it properly encrypted than the way it is now. I really don't know how the idiots get a job involving such sensitive data in the first place! But this drive is nothing new; well thought out drives like the Ironkey have been around for years so not having the kit available is no excuse.

  4. #4
    Member
    Join Date
    Jun 2004
    Posts
    141
    Thanks
    11
    Thanked
    8 times in 7 posts

    Re: News - Encrypted USB Flash drive approved for "top secret" data

    I suspect that you won't be able to decrypt on Linux or Mac computers, further locking the UK guvernment into a microsoft balls-grip

  5. #5
    Banned
    Join Date
    Jun 2008
    Posts
    2,129
    Thanks
    13
    Thanked
    189 times in 160 posts

    Re: News - Encrypted USB Flash drive approved for "top secret" data

    Does it pass the 'scissors next to the testicles' test.

    No, hence insecure.

  6. #6
    Senior Member watercooled's Avatar
    Join Date
    Jan 2009
    Posts
    11,470
    Thanks
    1,540
    Thanked
    1,029 times in 872 posts

    Re: News - Encrypted USB Flash drive approved for "top secret" data

    Quote Originally Posted by bobharvey View Post
    I suspect that you won't be able to decrypt on Linux or Mac computers, further locking the UK guvernment into a microsoft balls-grip
    I know the Ironkey does support other OSes, it didn't originally but support was added later.

    Quote Originally Posted by abaxas View Post
    Does it pass the 'scissors next to the testicles' test.

    No, hence insecure.
    Simple, don't give the carrier the key. Following proper security practice, you don't have the key material and the ciphertext in the same place, i.e. biometrics, keyfile and passphrase are of limited use if they all belong to the carrier...

  7. #7
    Banned
    Join Date
    Jun 2008
    Posts
    2,129
    Thanks
    13
    Thanked
    189 times in 160 posts

    Re: News - Encrypted USB Flash drive approved for "top secret" data

    Quote Originally Posted by watercooled View Post
    I know the Ironkey does support other OSes, it didn't originally but support was added later.



    Simple, don't give the carrier the key. Following proper security practice, you don't have the key material and the ciphertext in the same place, i.e. biometrics, keyfile and passphrase are of limited use if they all belong to the carrier...
    By definition someone has to have access to the data. If not the data is by definition neither secure or insecure.

    Security by definition is trust and audit.

  8. #8
    Senior Member watercooled's Avatar
    Join Date
    Jan 2009
    Posts
    11,470
    Thanks
    1,540
    Thanked
    1,029 times in 872 posts

    Re: News - Encrypted USB Flash drive approved for "top secret" data

    Of course, but that someone shouldn't be the person who's carrying it, key and ciphertext should be kept far apart and have no knowledge of each other ideally. If you're relying on one person to carry top-secret data on a £100 flash drive whilst memorising the key you're doing something badly wrong. If an adversary found such a situation they'd be very suspicious of the legitimacy of the data - being handed to them so easily it's probably a decoy.

  9. #9
    Gentoo Ricer
    Join Date
    Jan 2005
    Location
    Galway
    Posts
    11,048
    Thanks
    1,016
    Thanked
    944 times in 704 posts
    • aidanjt's system
      • Motherboard:
      • Asus Strix Z370-G
      • CPU:
      • Intel i7-8700K
      • Memory:
      • 2x8GB Corsiar LPX 3000C15
      • Storage:
      • 500GB Samsung 960 EVO
      • Graphics card(s):
      • EVGA GTX 970 SC ACX 2.0
      • PSU:
      • EVGA G3 750W
      • Case:
      • Fractal Design Define C Mini
      • Operating System:
      • Windows 10 Pro
      • Monitor(s):
      • Asus MG279Q
      • Internet:
      • 240mbps Virgin Cable

    Re: News - Encrypted USB Flash drive approved for "top secret" data

    Quote Originally Posted by watercooled View Post
    Of course, but that someone shouldn't be the person who's carrying it, key and ciphertext should be kept far apart and have no knowledge of each other ideally. If you're relying on one person to carry top-secret data on a £100 flash drive whilst memorising the key you're doing something badly wrong. If an adversary found such a situation they'd be very suspicious of the legitimacy of the data - being handed to them so easily it's probably a decoy.
    But we know in reality this just wont happen. If all the data holder is doing with the data is transporting it from A->B, the government has way more secure dedicated line data transmission methods available, even over VPN is far safer. These sneakernet solutions are about out of office working on the data, and that just shouldn't happen.
    Quote Originally Posted by Agent View Post
    ...every time Creative bring out a new card range their advertising makes it sound like they have discovered a way to insert a thousand Chuck Norris super dwarfs in your ears...

  10. #10
    Senior Member watercooled's Avatar
    Join Date
    Jan 2009
    Posts
    11,470
    Thanks
    1,540
    Thanked
    1,029 times in 872 posts

    Re: News - Encrypted USB Flash drive approved for "top secret" data

    I agree, but I doubt most of it is authorised. But in cases like the one where some idiot lost 2 CDs' worth of social security numbers (IIRC), that would have been much better even if something free like Truecrypt was used.

  11. #11
    Gentoo Ricer
    Join Date
    Jan 2005
    Location
    Galway
    Posts
    11,048
    Thanks
    1,016
    Thanked
    944 times in 704 posts
    • aidanjt's system
      • Motherboard:
      • Asus Strix Z370-G
      • CPU:
      • Intel i7-8700K
      • Memory:
      • 2x8GB Corsiar LPX 3000C15
      • Storage:
      • 500GB Samsung 960 EVO
      • Graphics card(s):
      • EVGA GTX 970 SC ACX 2.0
      • PSU:
      • EVGA G3 750W
      • Case:
      • Fractal Design Define C Mini
      • Operating System:
      • Windows 10 Pro
      • Monitor(s):
      • Asus MG279Q
      • Internet:
      • 240mbps Virgin Cable

    Re: News - Encrypted USB Flash drive approved for "top secret" data

    Quote Originally Posted by watercooled View Post
    I agree, but I doubt most of it is authorised. But in cases like the one where some idiot lost 2 CDs' worth of social security numbers (IIRC), that would have been much better even if something free like Truecrypt was used.
    Right, but government clerks shouldn't even have the capability of copying data in the first place. If legitimate employees can copy it at ease, spies can do it, too. It's a massive gaping hole in security.
    Quote Originally Posted by Agent View Post
    ...every time Creative bring out a new card range their advertising makes it sound like they have discovered a way to insert a thousand Chuck Norris super dwarfs in your ears...

  12. #12
    Senior Member
    Join Date
    Aug 2007
    Posts
    1,555
    Thanks
    19
    Thanked
    56 times in 53 posts

    Re: News - Encrypted USB Flash drive approved for "top secret" data

    do they have a loud whistling function that operates after being left unattended on a train?

  13. #13
    Senior Member
    Join Date
    Aug 2005
    Location
    Blackpool, Lancashire
    Posts
    416
    Thanks
    21
    Thanked
    16 times in 14 posts
    • superscaper's system
      • Motherboard:
      • MSI GT725
      • CPU:
      • Intel Core 2 P9500
      • Memory:
      • 4 GB DDR2
      • Storage:
      • 500 GB
      • Graphics card(s):
      • Mobility HD4850
      • PSU:
      • 120W
      • Case:
      • MSI GT725
      • Operating System:
      • Windows 7 Ultimate 64

    Re: News - Encrypted USB Flash drive approved for "top secret" data

    It may be different in civil service but I thought anything above "Restricted" (although they may have different names for classifications), e.g. Secret, Top Secret is not allowed to be copied or even allowed to be removed from the room/premises it is in. At least that's how it was at the nuclear place I briefly worked in. I'm pretty sure if the civil servants (and mainly ministers from the headlines) simply followed existing procedure there wouldn't be a requirement for such extreme measures anyway. I'm pretty sure in many of the headline cases of data loss by civil servants etc they weren't actually following their own rules.

  14. #14
    Senior Member watercooled's Avatar
    Join Date
    Jan 2009
    Posts
    11,470
    Thanks
    1,540
    Thanked
    1,029 times in 872 posts

    Re: News - Encrypted USB Flash drive approved for "top secret" data

    Yeah that's my thinking too, but the penalties don't seem to be enough of a deterrent for breaking the rules, unfortunately. I know of someone who worked in the nuclear industry and made a simple mistake on some paperwork and immediately lost his job. I mean what he did wasn't dangerous in itself but measures like that tend to stop carelessness in the first place.

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Similar Threads

  1. Alu USB 6 in 1 card read / USB flash drive
    By Lexeus in forum Retail Therapy and Bargains
    Replies: 6
    Last Post: 13-12-2003, 09:09 PM
  2. Weird Problems - Please Help!!
    By chez in forum PC Hardware and Components
    Replies: 4
    Last Post: 20-09-2003, 06:25 PM
  3. usb flash drive
    By Axion in forum PC Hardware and Components
    Replies: 4
    Last Post: 19-09-2003, 06:53 PM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •