Ask HN: How do you protect sensitive data?

Re:Ask HN: How do you protect sensitive data? by bdibs on Sunday April 21, 2019 @05:07AM (#19711267)

I’m not an expert, but just a few personal guidelines off the top of my head:

1) Only store what you absolutely need, you can’t lose what you don’t have

2) When logging, redact passwords and PII

3) Ensure proper user rights using a whitelist (not a blacklist)

4) Use a proper IDS to detect anomalies early

[ Parent | on HN ]

Re:Ask HN: How do you protect sensitive data? by maxheadroom on Sunday April 21, 2019 @05:49AM (#19711362)

5) Encrypt data at rest (where possible) and look to take advantage of AMD's[0] or Intel's[1] coming features for runtime.

[ Parent | on HN ]