Forum home› The potting shed
This Forum will close on Wednesday 27 March, 2024. Please refer to the announcement on the Discussions page for further detail.

🙈CURMUDGEONS' CORNER 11🙉

1666769717287

Posts

  • KiliKili Posts: 1,104
    Never forget Sandra Bullock in The Net!  And I spent a life in IT 
    I never forget her either always had the hots for her. 

    'The power of accurate observation .... is commonly called cynicism by those that have not got it.

    George Bernard Shaw'

  • My brother in law spent a lifetime in computing too & he still says he would never do on line banking, recons it's not secure enough.
    AB Still learning

  • KiliKili Posts: 1,104
    edited December 2020
    My brother in law spent a lifetime in computing too & he still says he would never do on line banking, recons it's not secure enough.
    Each to his own. You wont have much choice but to bank online in the future from what I can see the way things are going.  I don't know anyone who goes to a bank anymore to conduct their business. Its either telephone banking or online.
    Lets face it were all online now in these forums if there are concerns about being online its to late where already there.



    'The power of accurate observation .... is commonly called cynicism by those that have not got it.

    George Bernard Shaw'

  • He does do telephone banking just not on line.  If they improve their security then he will.  I  do  online myself.  
    AB Still learning

  • Kili said:
    @Kili interesting, I take the opposite view. If a document is stored electronically anywhere, unless it's in an air gapped system, it can always be hacked and stolen.

    I'd never keep digital versions of identity documents on consumer/end user devices, the risk is far too high. 
    With the latest encryption technologies and 2FA I have no qualms about storing documents in my online encrypted account.

    But What ever works for you is what you should do.
    Encryption and 2FA is irrelevant when you still have to download and decrypt the document to make it useable / readable on your consumer EUC device. As soon as it's opened and displayed, any compromise of the EUC device means your identity document is compromised too. 

    Joe Public are unlikely to have the skill and knowledge to mitigate this risk (see the huge number of malicious apps in the various mobile app stores), so whilst corporate MDM enrolled devices are more secure, I wouldn't risk it with consumer devices.

    Remember that physical securid tokens were the standard for MFA, until RSA provided a software token on blackberry, and the integrity of the solution was quickly compromised.
  • BenCottoBenCotto Posts: 4,718
    Strelitzia, does your post come with subtitles for the hard of understanding? 😉
    Rutland, England
  • KiliKili Posts: 1,104
    Kili said:
    @Kili interesting, I take the opposite view. If a document is stored electronically anywhere, unless it's in an air gapped system, it can always be hacked and stolen.

    I'd never keep digital versions of identity documents on consumer/end user devices, the risk is far too high. 
    With the latest encryption technologies and 2FA I have no qualms about storing documents in my online encrypted account.

    But What ever works for you is what you should do.
    Encryption and 2FA is irrelevant when you still have to download and decrypt the document to make it useable / readable on your consumer EUC device. As soon as it's opened and displayed, any compromise of the EUC device means your identity document is compromised too. 

    Joe Public are unlikely to have the skill and knowledge to mitigate this risk (see the huge number of malicious apps in the various mobile app stores), so whilst corporate MDM enrolled devices are more secure, I wouldn't risk it with consumer devices.

    Remember that physical securid tokens were the standard for MFA, until RSA provided a software token on blackberry, and the integrity of the solution was quickly compromised.

    With the latest encryption technologies and 2FA I have no qualms about storing documents in my online encrypted account.

    But What ever works for you is what you should do.



    'The power of accurate observation .... is commonly called cynicism by those that have not got it.

    George Bernard Shaw'

  • @Kili that's what you posted before, but reliance on encryption and MFA only covers data at rest and in transit from cloud. When in use on your device, cached locally, it's vulnerable unless you possess sufficient skills to ensure confidentiality and device integrity is maintained. The value of passport data is so high, I wouldn't recommend anyone takes that risk.


    BenCotto no, but it does come with extra acronyms to make me look even more, like, smarter yeah ;) . Short version: don't store the most important documents and data - the ones that could impact your "real world" if stolen, like passports - on your phone  :)


    Unrelated note: my browser just auto-corrected "stolen" to "Stollen", and now I'm hungry for a piece. The Marks&Spencer pack of 5 Stollen slices is my favorite. Does anyone have any other recommendations?

  • B3B3 Posts: 27,505
    I got some mini ones in Lidl. I haven't opened them yet but the box looks nice😉
    In London. Keen but lazy.
  • ObelixxObelixx Posts: 30,090
    Vendée - 20kms from Atlantic coast.
    "The price good men (and women) pay for indifference to public affairs is to be ruled by evil men (and women)."
    Plato
Sign In or Register to comment.