Hacker News new | ask | show | jobs
by endisneigh 1003 days ago
how is this sort of stuff not at least encrypted at rest?
3 comments

Encryption at rest does nothing to prevent online access to data. It's only useful if you leave your storage cabinet standing on the side of the road.
Your laptop backup could be encrypted. New problem: where to out the keys. Maybe another storage account with different access controls.
> New problem: where to out the keys.

If it's windows, Active Directory.

Per the article, the Azure bucket was explicitly shared. Azure Storage is generally encrypted at rest (https://learn.microsoft.com/en-us/azure/storage/common/stora...).
What do you think "encryption at rest" means