2 Comments

This is an ok post. I have a couple of points to add, based on my 15 years experience in IT Security. This comes from an auditor's perspective.

The first point is about Seagate. There are grounds for concerns about Seagate's neutrality in the hardware provider space. If you choose to use them, be sure to reformat and partition the disk before using. Do not use any software they provide for backups or anything. This is pretty much true for anyone. Recommended storage providers include Sandisk and Kingston.

A broader point surrounds this advice in general, which I contextualize as "Convenience versus Security." I have had untold numbers of conversations with end users, sys admins, dba's, IT Director's CTO's, CEO's and regular old people.

Almost universally they all want the easiest, cheapest solution. Like Vaccines, they just want someone to tell them it's safe, keep on following the path of least resistance.

I found it to be a losing battle. Those who know, know, and those who don't, don't really care.

Pretty good advice overall, but there is a hidden danger. There is also mapping and monitoring "out of band" behaviors, so people who slightly participate, inconsistently dis participate, and those who drop offline entirely are easily traceable as outliers. Damned if you do, damned if you don't.

Expand full comment

All fine and good until reality sets in...

We're screwed!

Expand full comment