<body><script type="text/javascript"> function setAttributeOnload(object, attribute, val) { if(window.addEventListener) { window.addEventListener('load', function(){ object[attribute] = val; }, false); } else { window.attachEvent('onload', function(){ object[attribute] = val; }); } } </script> <div id="navbar-iframe-container"></div> <script type="text/javascript" src="https://apis.google.com/js/platform.js"></script> <script type="text/javascript"> gapi.load("gapi.iframes:gapi.iframes.style.bubble", function() { if (gapi.iframes && gapi.iframes.getContext) { gapi.iframes.getContext().openChild({ url: 'https://www.blogger.com/navbar.g?targetBlogID\x3d12988030\x26blogName\x3dDon\x27t+Trust+Snakes\x26publishMode\x3dPUBLISH_MODE_BLOGSPOT\x26navbarType\x3dBLUE\x26layoutType\x3dCLASSIC\x26searchRoot\x3dhttps://donttrustsnakes.blogspot.com/search\x26blogLocale\x3den_US\x26v\x3d2\x26homepageUrl\x3dhttp://donttrustsnakes.blogspot.com/\x26vt\x3d-4673447362931781663', where: document.getElementById("navbar-iframe-container"), id: "navbar-iframe", messageHandlersFilter: gapi.iframes.CROSS_ORIGIN_IFRAMES_FILTER, messageHandlers: { 'blogger-ping': function() {} } }); } }); </script>


DON’T

TRUST

SNAKES

“I know where I'm headed.”
ROGER THORNHILL


« Home »


Monday, January 30, 2006

From the absurd-ways-to- think-about-it department

A report released Friday by security-software company Symantec suggests that an ordinary notebook holds content valued at 550,000 pounds ($972,000), and that some could store as much as 5 million pounds--or $8.8 million--in commercially sensitive data and intellectual property. - CNET News.com, January 27, 2006
This is just preposterous on its face. Of course, they are talking about laptops used by businesses, so that's already moving away from the concept of "an ordinary notebook" (here's another article on the same report, this one referring to "the average laptop"--and nice to see the IT journalists falling within a factor of two of each other when regurgitating the central number in a prepackaged story).

There seems to be an assumption that the data on one of these laptops will be lost forever if it falls into the wrong hands, although no doubt the bulk of it exists in other copies within the organization. Or perhaps they are assuming that the wrong hands will be able to timely exploit all the information on the notebook and leverage the maximum value from it. Or perhaps they are assuming that these ordinary notebooks and average laptops are the business equivalent of submarine code books--when one is compromised you have to assume the worst, toss the lot and start over from scratch.

Since each of these assumptions is absurd, am I missing another that makes this report remotely creditable? (Yes, I'm talking to you, CISSP. How many other CISSPs do you think read this blog?)

Coincidentally, I found this item just after I started backing up all my digital photos to DVDs. Maybe I have been undervaluing my photographic talents.


posted at 11:00 PM

0 Comments:

Post a Comment

<< Home