A hack of the L.A. city attorney’s office compromised 7.7 terabytes of sensitive LAPD records.
If you are at a FAANG, you have dedicated teams who can do nothing but monitor for data exfiltration. Is there anything plug-and-play that can do a reasonable job of flagging/disconnecting massive outbound data transfers? Presumably insidiously difficult now that everything is expected to be in the cloud, so that bulk data movements are the norm.
I just hate it that every official interaction of my life is digitized for all time. It seems a given that all of my medical/financial/embarrassing history is destined to be viewed by someone I would rather not have it. Which is not even considering how many businesses will gleefully sell my interactions to ad companies.
AlBugdy•30m ago
> Is there anything plug-and-play that can do a reasonable job of flagging/disconnecting massive outbound data transfers?
I don't know of such a tool but you'd have to run it everywhere you have data. If the LAPD's data was not on prem, which is expected (but not necessarily a good practice for sensitive data), it would be harder to both have an exfiltration monitor for the data they do have on prem and for the data they have in whatever hosting provider or "cloud" they stored it at. Maybe the bill for the egress transfers in the morning plays such a role to a certain extent.
3eb7988a1663•1h ago
I just hate it that every official interaction of my life is digitized for all time. It seems a given that all of my medical/financial/embarrassing history is destined to be viewed by someone I would rather not have it. Which is not even considering how many businesses will gleefully sell my interactions to ad companies.
AlBugdy•30m ago
I don't know of such a tool but you'd have to run it everywhere you have data. If the LAPD's data was not on prem, which is expected (but not necessarily a good practice for sensitive data), it would be harder to both have an exfiltration monitor for the data they do have on prem and for the data they have in whatever hosting provider or "cloud" they stored it at. Maybe the bill for the egress transfers in the morning plays such a role to a certain extent.
PS - where can one find the 7.7 TB data?