Hacker News Reader

Comment by tptacek | Hacker News Reader

I don't want to comment much on a story from a trade rag like Computerworld, especially when it ignores the fact that we already have better options than this press release product. But, I'll take a moment to correct you:

In many F-500 companies, disk encryption is already a corporate standard on all laptops; the organizations that are worried about losing passwords keep escrow keys. The problem people are trying to solve is, if you leave your car unlocked and lose your laptop, you don't have to cut a press release about how many SSNs you just lost.

View on HN

I don't deny that there are ways in which encryption can be very useful and that a very organized company can guard against ever losing their data because of a password mishap. I'm just saying I've never met one of these companies and I've done my fair share of consulting work for companies large and small,

People are used to security that can be circumvented if need be (through an administrators password or at worst a disk recovery service). When you're talking about hardware based encryption that option is no longer on the table and I think that rightfully makes a lot of people uncomfortable. In that way it's a huge risk.

Which is why things like bitblocker (again, built into Vista) don't get used.

Big organizations don't trust individuals enough to make them the single point of failure for encryption. Most often, these organizations run key servers that have the actual key, and provide the key based on some form of auth (usually Active Directory). If the user forgets their AD password, its an easy reset; and if they leave the company or something, their data is easily recoverable.

This sort of "encryption in the sky" approach is available to consumers too. There are products by most of the big encryption vendors (like http://voltage.com/vsn/) that make it easy for a user to encrypt their data without putting themselves at risk for data loss.

> if you leave your car unlocked and lose your laptop,

You're assuming that they didn't lose the key as well.

You remember the key; it's the sequence of digits and letters on the post-it just beside the track pad.

Reply on news.ycombinator.com