Re: Securing tape backup drive

check you flea market & ebay for the tape cartridge (if they are that dumb)
jim

To: "Midrange Systems Technical Discussion" <midrange-l@xxxxxxxxxxxx>
Sent: Monday, March 19, 2007 12:35 PM
Subject: Re: Securing tape backup drive

Unfortunately this was a stand alone drive, just sitting on a shelf in
an open frame rack.

Next year I am planning on them upgrading to whatever replaces a 520 and
expect it to be in a fully enclosed rack, with locking doors. Now where
does the operator hang the key...  ;-)

BTW, in one office the occupant had one drawer locked. The tore the room
to shreds to get into it to get about $50 in the new dollar coins. The
more it is locked the more the morons tear it open because there MUST BE
SOMETHING VALUABLE IN IT.

Roger

On 3/19/2007 9:40 AM, Haase, Justin C. wrote:

Most of the LTO libraries and loaders have locks on them.  It's not
bulletproof by any means, but it is enough to cause frustration when in
a hurry to just leave it alone.

Justin C. Haase
Solution Manager - Technical Services
Kingland Systems Corporation

-----Original Message-----
From: midrange-l-bounces@xxxxxxxxxxxx
[mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of Roger Vicker, CCP
Sent: Monday, March 19, 2007 9:37 AM
To: Midrange List
Subject: Securing tape backup drive

I have a customer that was broken in to Thursday night. The morons were
interrupted before they could get much of anything. However they were in
the process of trying to get a couple of rack mounted PCs and a model
800 (with the expansion) and had cut all but the power cables in two.
They must have believed the LTO tape drive was the video recorder
because they specifically ejected the cartridge and somehow managed to
get away with it even though the bag they were collecting cameras and
such in was left behind.

Now, my customer is having to notify all their customers that had given
their bank accounts for automatic bill payment about a possible data
breach. It is not very likely (but still possible) that the thieves will
actually be able to get the tape to someone with the right combination
of equipment to be able to actually use the account numbers. The
location is out in the boon docks and they would have to go hundreds of
miles to get to anyone that might be unethically technical enough or
without asking to be arrested. Even if the tape had been encrypted (as
others have rightly demanded IBM provide as an option) I believe that
the notice would still have had to been sent because their is a
_possiblity_ it could be still have been decrypted.

The question now, since they will have to replace the cable for the tape
drive anyway, is what are others doing to protect their un-attended tape
backup from break ins? Is it in some extra secured enclosure so that
even though they get into the IT room they can't get to the tape, and
how easy is it for the staff to change the tape each day? Do you have
extra long cables and conceal the drive somewhere else and how good is
that when the morons ransack the place to find any possible money or
VCR?

Roger Vicker, CCP

--

*** Vicker Programming and Service *** Have bits will byte *** www.vicker.com ***

Pick two: [1] Fast   [2] Right   [3] Cheap

--

This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list

To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.