Re:Disk encryption in AWS is close to useless and potentiall...
by andorov on Friday December 16, 2022 @09:40AM
(#34014964)
What about the disk being reused by another process without being thoroughly wiped by AWS?
[ Parent
| on HN ]
Re:Disk encryption in AWS is close to useless and potentiall...
by colonelpopcorn on Friday December 16, 2022 @09:44AM
(#34015020)
That's an interesting idea. I imagine they don't do DoD wipes of their disks because they are probably multi-tenant, right? Can a guest operating system do forensic analysis on the host disk?
Re:Disk encryption in AWS is close to useless and potentiall...
by britneybitch on Friday December 16, 2022 @09:51AM
(#34015110)
AWS wipes disks before reusing them (loosely speaking--an EBS volume doesn't correspond 1:1 to a physical disk). Forensic analysis of overwritten data requires disassembling the physical disk, so no, it's not possible.
Re:Disk encryption in AWS is close to useless and potentiall...
by whoknew1122 on Friday December 16, 2022 @10:20AM
(#34015520)
Disks are wiped immediately before are made available as a new volume. If your policies require a certain level of wipe, you should wipe the disk before releasing it.