News for hackers. Stuff that matters.

A comment on Canon's cloud platform has lost users' files and can't restore them. Parent comment

Re:Canon's cloud platform has lost users' files and can't re... by chmod775 on Tuesday August 18, 2020 @06:49AM (#24197193)
> Store customer data immutable and encrypted, with a unique AES encryption key per customer. Encrypt that AES key again with a single RSA key-pair and store the encrypted AES-key in a database.

Now you have the worst of both worlds. You also now have 2 points of failure where data can get lost, because if either has a problem you lose data.

[ Parent | on HN ]
Re:Canon's cloud platform has lost users' files and can't re... by Ensorceled on Tuesday August 18, 2020 @07:26AM (#24197420)
I can't think of a mechanism where you can lose the customer's database records but can still recover files associated with that customer ...
[ Parent | on HN ]
Re:Canon's cloud platform has lost users' files and can't re... by menybuvico on Tuesday August 18, 2020 @11:24AM (#24199782)
Total systen compromise. The backup for the files worked. the ones for the DB didn't.
[ Parent | on HN ]
Re:Canon's cloud platform has lost users' files and can't re... by Ensorceled on Tuesday August 18, 2020 @07:26PM (#24205537)
Right, but how to you figure which customers own which files? I don't label the assets FrankPJonesPortlandOregonUSA9095551212.jpg. If I've lost the database record I have no idea who owns cat_picture.jpg
[ Parent | on HN ]