Conversation

Notices

1. Foone🏳️‍⚧️ (foone@digipres.club)'s status on Wednesday, 13-Dec-2023 09:56:03 JST Foone🏳️‍⚧️

   friendly reminder to WIPE YOUR MEDIA.
   I just got handed a floppy disk my roommate pulled out some weird device at e-waste, and I imaged it.

   it's got medical data on it! patient data, the EEGs of a child from 1999

   • Foone🏳️‍⚧️ (foone@digipres.club)'s status on Wednesday, 13-Dec-2023 09:57:24 JST Foone🏳️‍⚧️

     in reply to

     thankfully no SSN this time, though that has happened more than once

   • Foone🏳️‍⚧️ (foone@digipres.club)'s status on Wednesday, 13-Dec-2023 10:27:59 JST Foone🏳️‍⚧️

     in reply to

     • Ty ❤️ Alma

     @TRodick93 well from the files on this disk, the system was created 5 years before HIPAA... still not an excuse

   • Ty ❤️ Alma (trodick93@tweesecake.social)'s status on Wednesday, 13-Dec-2023 10:28:00 JST Ty ❤️ Alma

     in reply to

     @foone HIPAA violation much?

   • Foone🏳️‍⚧️ (foone@digipres.club)'s status on Wednesday, 13-Dec-2023 10:47:11 JST Foone🏳️‍⚧️

     in reply to

     • LisPi
     • Julia :v_trans: :v_bi: (ugly)

     @lispi314 @julia yeah. at a previous job we had the question of if we could safely recycle old drives by using the (S)ATA command to do a secure erase, and the eventual answer turned out to be... no. encrypt your shit from day one and toss the key when you need to recycle a drive, don't trust anything else

   • LisPi (lispi314@udongein.xyz)'s status on Wednesday, 13-Dec-2023 10:47:12 JST LisPi

     in reply to

     • Julia :v_trans: :v_bi: (ugly)
     @foone @julia Or preferably, use software-based encryption on the whole device from the start. You cannot trust barely-auditable in-hardware encryption and neither can you trust the firmware to not pull shenanigans while wiping a device.
     
     The only way to be sure is to ensure the device never has access to the plaintext at all.