Repeated from time to time, confidential files are leaked to the public. Everyone can access and download these files through FOXY. How come FOXY release these sensitive data?
There is no special logic inside FOXY. Normally, the user does not understand the characteristics of FOXY. FOXY is developed for file sharing. All the files in the download folder are shared by default because these shared files are assumed to be shared again.
The typical users who do not understand technology may ignore the security issue. They may set MY DOCUMENTS to be the download folder for convenience. It is extremely dangerous that all personal files, confidential files are exposed to the public. When someone has downloaded the file, it is hard to stop him to share it.
Regarding to the news, it is very careless for a policeman to install such kind of software when he knows that there are confidential documents. He has the responsibility to protect them. I believe there are lots regulations and guidelines for confidential document. It is just hard to perform IT audit on personal computer outside the government buildings.
Not all policemen have well trained with IT skills and security measures. However, it is getting more and more policemen are using computers. Therefore, it implies that the existing training is not enough. We need effective training to transform the security procedures to be habit.
沒有留言:
張貼留言