336
Laid-off Intel employee allegedly steals 'Top Secret' files, then disappears — ex-engineer downloaded 18,000 files before vanishing (www.tomshardware.com)
submitted 1 year ago by to c/hardware@lemmy.world
62 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[–] 11 points 1 year ago (10 children)

Logs

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 10 child comments
    •
  • [+] -7 points 1 year ago (9 children)

    Who logs who reads files? And even if, who checks those logs? Gotta be a wild system.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 9 child comments
    •
  • [–] 12 points 1 year ago (4 children)

    Lots of companies maintain access logs. Anything with high security you want to be able to audit who accessed what and when.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 4 child comments
    •
  • [–] 1 point 1 year ago (3 children)

    But who pays someone to check them?

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 3 child comments
    •
  • [–] 8 points 1 year ago (2 children)

    Normally you just have the systems admin or an automated system look into it. It depends on your security setup.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 1 point 1 year ago (1 child)

    Yeah I guess that's the only sane way to do it. A tiny bit crazy the whole system exists, an automatic verification lights up, but only after the dude left.

    Why did he have access to all that for starters, why wasn't the alarms ringing when he did it etc. seems like security at Intel is kind of wonky. 🤷🏻‍♀️

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 3 points 1 year ago

    It might just come down to they never experienced the exact type of espionage so didn’t have strong guardrails to prevent this. Hopefully some security engineers learned a lesson from this and will change their processes.

  • permalink
  • fedilink
  • source
  • parent
  • [–] 4 points 1 year ago

    Siems and such systems are designed for that. Could be part of SOC or CSIRT. Generally all large companies have that. It’s also getting more accessible to smaller structures in the form of « as a service ». A data leak is a data leak whatever the vector so shit needs to be detected & acted upon. It’s all fun & fair games when about Intel secrets it seems but what when a dickhead steals medical data or other perso stuff ?

  • permalink
  • fedilink
  • source
  • parent