<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
		>
<channel>
	<title>Comments on: Ensuring Data Security During Hardware Disposal</title>
	<atom:link href="http://www.darknet.org.uk/2009/05/ensuring-data-security-during-hardware-disposal/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.darknet.org.uk/2009/05/ensuring-data-security-during-hardware-disposal/</link>
	<description>Ethical Hacking, Penetration Testing &#38; Computer Security</description>
	<lastBuildDate>Sat, 21 Nov 2009 06:04:59 +0000</lastBuildDate>
	<generator>http://wordpress.org/?v=2.8.6</generator>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
		<item>
		<title>By: cbrp1r8</title>
		<link>http://www.darknet.org.uk/2009/05/ensuring-data-security-during-hardware-disposal/#comment-150113</link>
		<dc:creator>cbrp1r8</dc:creator>
		<pubDate>Tue, 12 May 2009 14:11:29 +0000</pubDate>
		<guid isPermaLink="false">http://www.darknet.org.uk/?p=1784#comment-150113</guid>
		<description>&quot;how can missile systems data be left on a computer sold on eBay? It just seems ridiculous.

Companies dealing with confidential information generally have data disposal policies in place, why do government organisations dealing with World security not have tight policies regarding disposal of decommissioned hardware?&quot;

Well in the 1st place, I used to work directly with a similar project. The entity isn&#039;t government at all and the only oversight is 1 to a few Military (i.e. air force) officers who generally don&#039;t have anymore knowledge of security then the average ground slug. Their primary mission is SAC and are thrown into other &quot;related&quot; programs based on their job/skill. These jobs, in this case related missile test technology really isn&#039;t their forte&#039; so there isn&#039;t a miiltary oversight. 

This being the case, this incident actually happened with Lockheed Martin...a &quot;PRIMARY&quot; missile defense contractor..but it could have just as easily been any other contract company since they&#039;re all about the same (Raytheon, Boeing, CACI you name it). They have a few guys (in their mis-management structure) that are overseeing several million to multi-billion dollar projects and have teams that work in the field, on the actual mission/facility or location where this work is conducted, this could be 100s to 1000&#039;s of miles of way from any kind of oversight from management or any other corporate staff. In this case, Kwajelein is 1000&#039;s of miles away from the mainland U.S. where everyone knows now they tested THAAD.

They might be, in this case, This group tasked with doing the removal of equipment and disposing of it, MOST lack the proper equipment and procedures (nearly non-existant) to conduct it properly.</description>
		<content:encoded><![CDATA[<p>&#8220;how can missile systems data be left on a computer sold on eBay? It just seems ridiculous.</p>
<p>Companies dealing with confidential information generally have data disposal policies in place, why do government organisations dealing with World security not have tight policies regarding disposal of decommissioned hardware?&#8221;</p>
<p>Well in the 1st place, I used to work directly with a similar project. The entity isn&#8217;t government at all and the only oversight is 1 to a few Military (i.e. air force) officers who generally don&#8217;t have anymore knowledge of security then the average ground slug. Their primary mission is SAC and are thrown into other &#8220;related&#8221; programs based on their job/skill. These jobs, in this case related missile test technology really isn&#8217;t their forte&#8217; so there isn&#8217;t a miiltary oversight. </p>
<p>This being the case, this incident actually happened with Lockheed Martin&#8230;a &#8220;PRIMARY&#8221; missile defense contractor..but it could have just as easily been any other contract company since they&#8217;re all about the same (Raytheon, Boeing, CACI you name it). They have a few guys (in their mis-management structure) that are overseeing several million to multi-billion dollar projects and have teams that work in the field, on the actual mission/facility or location where this work is conducted, this could be 100s to 1000&#8217;s of miles of way from any kind of oversight from management or any other corporate staff. In this case, Kwajelein is 1000&#8217;s of miles away from the mainland U.S. where everyone knows now they tested THAAD.</p>
<p>They might be, in this case, This group tasked with doing the removal of equipment and disposing of it, MOST lack the proper equipment and procedures (nearly non-existant) to conduct it properly.</p>
]]></content:encoded>
	</item>
</channel>
</rss>
