Re:Why even strong crypto wouldn’t protect SSNs exposed in A...
by ryansouza on Thursday February 05, 2015 @03:45PM
(#9005935)
Encryption is a useful tool (and a fun research area), but like all tools, it's only useful if properly employed. If used in inappropriate situations, it won't provide protection and will create operational headaches and perhaps data loss from mismanaged keys.
PCI is a useful tool (and a fun research area), but like all tools, it's only useful if properly employed. If used in inappropriate situations, it won't provide protection and will create operational headaches and perhaps data loss from check lists.
Concurrency is a useful tool (and a fun research area), but like all tools, it's only useful if properly employed. If used in inappropriate situations, it won't provide protection and will create operational headaches and perhaps data loss from lock contention.
AI is a useful tool (and a fun research area), but like all tools, it's only useful if properly employed. If used in inappropriate situations, it won't provide protection and will create operational headaches and perhaps data loss from Skynet.
Computers is a useful tool (and a fun research area), but like all tools, it's only useful if properly employed. If used in inappropriate situations, it won't provide protection and will create operational headaches and perhaps data loss from solar flares.
Re:Why even strong crypto wouldn’t protect SSNs exposed in A...
by SlipperySlope on Thursday February 05, 2015 @05:58PM
(#9006720)
I am developing financial software and need to keep customer data and other secrets secure against OS compromise. Servers will have keys stored in a hardware tamper-proof USB. All such data will be strongly encrypted. When possible, the data will be used in its encrypted format, and if required to decrypt, the plain text will be transient within the program.
PCI is a useful tool (and a fun research area), but like all tools, it's only useful if properly employed. If used in inappropriate situations, it won't provide protection and will create operational headaches and perhaps data loss from check lists.
Concurrency is a useful tool (and a fun research area), but like all tools, it's only useful if properly employed. If used in inappropriate situations, it won't provide protection and will create operational headaches and perhaps data loss from lock contention.
AI is a useful tool (and a fun research area), but like all tools, it's only useful if properly employed. If used in inappropriate situations, it won't provide protection and will create operational headaches and perhaps data loss from Skynet.
Computers is a useful tool (and a fun research area), but like all tools, it's only useful if properly employed. If used in inappropriate situations, it won't provide protection and will create operational headaches and perhaps data loss from solar flares.
What am I missing?