Security Basics mailing list archives

Re: Opinions sought...How much information is to much to "give away"?


From: xyberpix <xyberpix () xyberpix com>
Date: Thu, 30 Jun 2005 18:23:42 +0100

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Ok, here's the parts that I'd give away:

1) The backup solution, and how much (GB) data you encrypt.
2) The OS's that you back up wll be on the vendor's site anyway, so if you say that you use Windows, it's not really that much of a big thing, as most companies run Windows somewhere these days. 3)None of their business, I don't see how this is relevant to the backup article
4)Who you are, maybe, where're you're located, no.

Just my 2p's worth

xyberpix

On 29 Jun 2005, at 16:17, Kevin Kasner wrote:

My backup vendor recently interviewed me for an article because I'm
using their encryption package.  They have sent me the article for
review, so I still have a chance to change how much information is
disclosed...

In the course of the article, several things are revealed about my environment:
1)  My backup solution & what types of data are encrypted in my back
ups (ie: customer data, AD/LDAP info, databases, server O/S's), and
that I have off site storage of tapes
2)  My OS mix (ie: Windows, ...)
3)  the fact that I have "separate solutions" for firewall, IDP,
remote access, and network monitoring
4)  Who we are and what city we are located in.

So...I'm looking for some honest opinions on whether I'm giving away
too much info.

Thanks!!


For Security And Open Source News And Info Visit:
http://www.xyberpix.com

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (Darwin)

iD8DBQFCxCqecRMkOnlkwMERAtQvAJ9RmIqSzLrt95sV6GzAkQ6qTPRKSgCfQObv
G5j5QJwI16gDYleb9UyaEeg=
=93ab
-----END PGP SIGNATURE-----


Current thread: