News for hackers. Stuff that matters.

A comment on Goldman says client data leaked, wants Google to delete email.

Re:Goldman says client data leaked, wants Google to delete e... by x0054 on Wednesday July 02, 2014 @11:27PM (#7981293)
On a side note, this is why it's so important for these large companies to STOP sending attachments and instead used shared links to files (like via Dropbox or equivalent). One way to do this would be to have a corporate wide email gateway that scans all emails, strips attachments, and converts them to hosted files. The gateway would replace the attachments with links to the same. This way, if something like this happens again, they can simply remove the hosted file or unshare it, no harm done.
[ Parent | on HN ]
Re:Goldman says client data leaked, wants Google to delete e... by rdtsc on Wednesday July 02, 2014 @11:50PM (#7981341)
> used shared links to files (like via Dropbox or equivalent)

Wait, wouldn't that be sharing their data with Dropbox? If data is so sensitive, I don't see why is Dropbox necessarily more trustworthy than a random stranger with a gmail account.

I if got a random email from GS with some brokerage account mumbo jumbo I would assume it is span and delete it. So would my mom and most friend and most people out there probably.

Presumably if this "stranger" is random, one can make an argument that data would be safer with them then with a big cloud data aggregator (as that would be a single targeted point of attack).

Ideally they should probably set up their own file sharing service with the ability to explicitly share some files externally (taking all the necessary security measures).

[ Parent | on HN ]
Re:Goldman says client data leaked, wants Google to delete e... by dublinben on Thursday July 03, 2014 @12:16AM (#7981405)
They wouldn't literally use Dropbox. There are similar services like ShareFile from Citrix that offer secure filesharing.
[ Parent | on HN ]
Re:Goldman says client data leaked, wants Google to delete e... by joelrunyon on Thursday July 03, 2014 @12:04AM (#7981371)
You can revoke access to a shared dropbox file. You can also disable the shared links.
[ Parent | on HN ]
Re:Goldman says client data leaked, wants Google to delete e... by rdtsc on Thursday July 03, 2014 @12:33AM (#7981449)
You can but not to dropbox. Dropbox still has access. That is the problem, isn't it?
[ Parent | on HN ]
Re:Goldman says client data leaked, wants Google to delete e... by x0054 on Thursday July 03, 2014 @01:35AM (#7981629)
I assure you, I only used Dropbox as an example. Clearly a system like this should be implemented by the company it self. If it's important, you should store it on your own servers, and make sure that those servers are safe.
[ Parent | on HN ]
Re:Goldman says client data leaked, wants Google to delete e... by jackvalentine on Thursday July 03, 2014 @12:50AM (#7981493)
In this scenario Dropbox isn't actually being suggested as a solution, just as a model to get your head in the right space for understanding the solution.
[ Parent | on HN ]
Re:Goldman says client data leaked, wants Google to delete e... by aviral on Wednesday July 02, 2014 @11:39PM (#7981314)
How come they did not password protect the file? And send the password via other media, if the information is of that high importance.This is normal practice.
[ Parent | on HN ]
Re:Goldman says client data leaked, wants Google to delete e... by x0054 on Thursday July 03, 2014 @01:26AM (#7981592)
That's what we used to do when I worked in the medical industry. It works, but at least once a day I had to field phone calls asking me what the password to a file I sent 3 weeks ago was. Eventually we just had to switch to using just one file, which obviously reduces security significantly.
[ Parent | on HN ]
Re:Goldman says client data leaked, wants Google to delete e... by PeterGriffin on Wednesday July 02, 2014 @11:36PM (#7981306)
iCloud will offer this in the coming iOS / OSX releases.
[ Parent | on HN ]
Re:Goldman says client data leaked, wants Google to delete e... by Alupis on Thursday July 03, 2014 @01:15AM (#7981554)
> iCloud will offer this in the coming iOS / OSX releases.

and... nobody cares.

[ Parent | on HN ]