QOTD - Marcus Ranum on Encryption & Data Leaks

Writing about yet another report of a lost memory stick containing unencrypted sensitive data, Marcus Ranum had this to say:
Let people copy critical data around, and critical data will leak; it's that simple. Encryption is not a panacea, because of the prevalence of keylogging trojans and the fact that people will have to have the data unencrypted, at some point, in order to use it. The answer to data leakage is data control. There is no "plan B". -- Marcus Ranum, member SANS NewsBites editorial board
Src: SANS NewsBites Vol 11 Num 19

No comments: