full-disclosure - [inbox] Re: Reacting to a server compromise

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

From: dufresne at winternet.com (Ron DuFresne)
Subject: [inbox] Re: Reacting to a server compromise

> HIPAA has made it a new world.  The attorneys are already salivating and
> trying to dig up any potential "victims" they can find, look to Arizona as
> an example.  Since this box was used to attacke doctor's records, there is a
> good chance it's tracks will be found.  This guys got two options, either
> don't touch the box, play dumb, and hope the cracker doesn't know how to
> cover his tracks (unlikely), or dd the drive, take the box offline (in that
> order in case it has a smart-bomb planted), and notify notify notify.
>
> We are instituting IDS and logging systems for healthcare customers every
> day and are finding attacks that they would not have even guessed at a year
> ago.  By law they must keep their logs three years, plenty of time for even
> scumbag lawyers to find it.  If you have done due diligence, you will be a
> sitting duck.



HIPAA compliance is much more then logging and IDS.  But, I trust that
this is not the limit of the services DP Solutions provides in such cases.

Of course HIPAA is not a "new world" thing, but, rather a compliance issue
for a new class of users and data.


Thanks,

Ron DuFresne
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
"Cutting the space budget really restores my faith in humanity.  It
eliminates dreams, goals, and ideals and lets us get straight to the
business of hate, debauchery, and self-annihilation." -- Johnny Hart
	***testing, only testing, and damn good at it too!***

OK, so you're a Ph.D.  Just don't touch anything.