%META:TOPICINFO{author="ChrisBartram" date="1149834525" format="1.1" version="1.1"}%
%META:TOPICPARENT{name="Hp3000ShopSecurity"}%
Anyone with physical access to an HP3000 system backup tape can at a minimum display/access the stored data on the tape. If the system contains confidential, classified, or sensitive data, the backup tapes must be treated the same. In addition, while a normal system user may have only restricted access to data on the system, someone with access to backup media can access/view ALL data on the system.

Finally, if the system backup used the ";DIRECTORY" parameter, all system accounts, users, groups, AND their passwords are accessible by reading the proper area of the tape. Directory password data on backup media is NOT encrypted in any way.



-- Main.ChrisBartram - 09 Jun 2006