News for hackers. Stuff that matters.

A comment on How we protect our most sensitive secrets from the most determined attackers.

Re:How we protect our most sensitive secrets from the most d... by mrb on Thursday November 18, 2021 @12:51PM (#29268311)
As an ex-InfoSec engineer for 12 years, my only concern is they seem to have no process to recover from a defective or destroyed HSM. But other than that it's quite good (though I have only skimmed the blog post.)
[ Parent | on HN ]
Re:How we protect our most sensitive secrets from the most d... by intunderflow on Thursday November 18, 2021 @12:54PM (#29268338)
We have multiple identical backup HSMs in multiple different sites. Any one of these + a keyholder quorum can recover the system. The entire safe room burning down is part of our possible disasters list.
[ Parent | on HN ]
Re:How we protect our most sensitive secrets from the most d... by bas_ta on Saturday November 20, 2021 @05:55AM (#29286989)
Do you perform the same ceremonies for each backup system like described in the post?
[ Parent | on HN ]
Re:How we protect our most sensitive secrets from the most d... by mrb on Thursday November 18, 2021 @01:08PM (#29268515)
Great!
[ Parent | on HN ]