Re: TN: Election Commission laptop harddrive found

["Tracy Blackmore" <tblackmore () tslad com>]

But with products like Tripwire - you don't have to manually go thru the hard-drive.  It will automatically monitor and 
notify if problems are found.  Plus... it's a LOT easier and quicker to restore a compromised server if you have a nice 
pretty list of all files having been modified already in your hands :-)
 
Tracy

________________________________

From: dataloss-bounces () attrition org on behalf of Chris Walsh
Sent: Fri 1/18/2008 10:37 AM
To: lyger
Cc: dataloss () attrition org
Subject: Re: [Dataloss] TN: Election Commission laptop harddrive found



On Fri, Jan 18, 2008 at 02:54:50PM +0000, lyger wrote:
> Computer experts have begun the process of examining the files and data
> components to determine if they have been accessed or tampered with,
> according to police.

Luckily, it is impossible to modify bits on a hard drive without leaving
evidence of your misdeed.

Surprisingly, Tripwire  and similar products manage to make quite a bit of
money despite this feature of computer architecture which is seemingly
known by even the least-experienced newspaper writer.


_______________________________________________
Dataloss Mailing List (dataloss () attrition org)
http://attrition.org/dataloss

Tenable Network Security offers data leakage and compliance monitoring
solutions for large and small networks. Scan your network and monitor your
traffic to find the data needing protection before it leaks out!
http://www.tenablesecurity.com/products/compliance.shtml


_______________________________________________
Dataloss Mailing List (dataloss () attrition org)
http://attrition.org/dataloss

Tenable Network Security offers data leakage and compliance monitoring
solutions for large and small networks. Scan your network and monitor your
traffic to find the data needing protection before it leaks out!
http://www.tenablesecurity.com/products/compliance.shtml