[AusNOG] Preparing 100s of routers for resale

[Damien Luke]

Generally they will but you'll find that the infosec team is quite separate
from the network team and far away from the asset team that is likely trying
to sell these to recover costs.

>From my time in government I've found that generally these sort of large
scale rip and replaces will be handled by contract PMs that don't understand
the consequences of this sort of information being available to random
people.  They're far more interested in making sure their
PMP/Prince2/whatever methodology is followed and that the technical details
be left to the technical resources that either don't have time to check all
of the details or find the whole process a hassle.

Damien

-----Original Message-----
From: ausnog-bounces at lists.ausnog.net
[mailto:ausnog-bounces at lists.ausnog.net] On Behalf Of hannah commodore
Sent: Thursday, 12 April 2012 9:50 PM
To: ausnog at lists.ausnog.net
Subject: Re: [AusNOG] Preparing 100s of routers for resale

On 12/04/2012, at 20:43, Tom Storey <tom at snnap.net> wrote:

> I suppose you could always try to do some destructive writes. Generate 
> some files from /dev/random that are the same size as the free space 
> on nvram: or flash: etc and copy them over. That should hopefully 
> overwrite any evidence of any files that might have existed. :-)

To be quite honest, I'm surprised these devices are being sent to us without
first being scrubbed. They are coming from a vic.gov.au agency. Surely they
would have a policy and procedure for wiping data already. 
_______________________________________________
AusNOG mailing list
AusNOG at lists.ausnog.net
http://lists.ausnog.net/mailman/listinfo/ausnog