Discussion on:

14
Comments

Join the conversation!

Follow via:
RSS
Email Alert
"Eventually, this information is going to have to remain on servers and simply be accessed seamlessly from mobile devices. The solutions still need to mature a bit to make this happen.???

"Techniques would be to keep data centralized so it can be viewed and altered but not carried away on a device."

This is... fantasy. There is no amount of "maturity" that will prevent a determined attacker from exploiting mobile devices just because the user is "viewing" the information rather than "storing" it. Because in reality, if you can "view" the documents on a mobile device, that document IS stored on the device for some period of time (whether it is on "disk," in memory, or on the screen, or all three,) and because of that an attacker can compromise them by compromising the device. It doesn't even matter if the document management system is sending an "image" of the document for you to read, if it shows up on your device, it can be compromised. No amount of wishful thinking will change that--short of human beings being genetically modified to include DRM in our eyeballs so that "unauthorized" data can't be read by human beings, within the boundaries of contemporary computer science, this is essentially an unsolvable problem.

It doesn't matter if they're "stored" in the traditional sense (i.e. "the permanent copy") "on the server," and you only get a "view" of it on your device--if you can see it on a device, a determined attacker can steal it. Even if I'm looking at an "image" of a document (i.e. not a downloaded, local copy) it doesn't matter--OCR exists, and all an attacker would have to do to compromise this data "viewing" scheme would be to send a screen capture somewhere and analyze said caps with OCR at the attacker's convenience.

And any scheme you can invent remains vulnerable to this attack, regardless of how it works. If, at some point, it is on the screen, it is vulnerable. Even if that info isn't "stored locally" on a disk, if its in RAM it is vulnerable. When you factor in that these devices are "unmanaged" in most environments it makes it almost certain that some percentage of these devices will be compromised.
-1 Votes
+ -
Right
Pete6677 14th May 2012
Umm, that's always been true for any computing device. Regardless of who owns it. And don't think that running the latest version of Symantec SystemHog is going to save you either. If someone wants your data that badly they'll get it. In fact there are far easier ways to do it, such as creatively asking an employee for their password.
-1 Votes
+ -
This is exactly what AT&T was using Internally back in the day. 200 users that had a terminal and a keyboard would login to a server and go about their business. I have never understood why companies spend ( waste ) so much money and time on pc's and IT support needed for them. Maintenance cost for users was practically zero. Maybe replace a terminal or kb a few times a year. Can somebody please explain the logic of pc's?
Quite simply it is cost.

Way back in the days of Mainframes companies spent a lot of money and that was measured in the 10 of Millions on the Mainframe and thousands of $ on the Terminals.

Compare that to a PC say a 286 which cost the company 10K about the same as an older Terminal and could do it on the Desktop not on a 2.5 Acre Server Farm which had the power of a Commodore Vic 20 of 15 or so years previously.

Back in the Bad Old Days of 1969 the Mainframe which took man to the moon had about as much processing power as a VIC 20. The difference in cost was fantastic and the possibilities of moving powerful PC's onto the Desktop and doing all your processing there was too good to be true.

Then came Microsoft which was not the best platform to do this with but because IBM supplied Microsoft DOS which was a Throw Together to get a OS which previously Microsoft never had or even planned on having.

The IBM PC started the PC Revolution for better or worse but today we are slowly seeing the return to Powerful Servers which we now call Blades and the new version of Dumb Terminals which we call Thin Clients. There are disadvantages just like there where back in the Bad Old Days but with Gigabite Networks and High Speed Broadband they are easier to overcome than they where previously, though cost is still an issue.

Recently I looked at a Real Estate Office here with a HP Blade a very small 10 CPU Unit with 35 Thin Clients in the entire office and it was marginal as to which was cheaper the Blade Setup or PC's on the Desk with a Terminal Server in the closet. What sold that place on the Blade was the cost of maintenance but that was all Fuzzy and Warm to the Owner with Estimates on the savings which have as yet not been realized.

The Initial Upfront costs where far less as they Hire the Blade and everything in the place now but the Monthly Running Costs and Hire Fees are far more than the PC's that this replaced. Over a 5 year period the costs will work out about the same with the advantage/disadvantage of not actually owning any hardware which needs to be disposed of safely. Depends on which side of the fence you sit on with that one if it is an Advantage or Disadvantage.

Though as the Hire Company owns the setup I'm not sure what actually happens to the HDD's in the Blade as they need to be returned with a working OS Installed so I'm guessing that the Hire Company will end up with all of the data as well as the hardware.

Not something that was originally discussed at the time of the Original Hire Contract being sold and here it all depends on how Ethical the Hire Company actually is I suppose.

Col
0 Votes
+ -
Start-up costs
CharlieSpencer_Palmetto Updated - 15th May 2012
Because the up-front costs to set up VDI (including training for the IT staff, HVAC upgrades) is often more expensive than the short-term costs of desktop client upgrades, especially if those upgrades are staggered as needed instead of being performed across the fleet all at the same time. The long-term ROI may not be there for VDI, especially if the company has only a small percentage of mobile users.
A few of comments:

- VDI is not necessarily synonymous with Server VDI
- Data does not necessisarily need to reside on server

Why is their no mention of solutions like MokaFive?

BYOD will do little to lower real IT support costs to the organisation. Either IT will need to provide support or the users will spend their work time trying to provide their own support which will eat into their own productivity or a hybrid of the two. This will regardless come at a cost to productivity.

Perhaps the increase in output due to flexible working via BYOD will outweigh any loss in productivity from resources due to self help and the possible inefficiencies of the same.

what about the risk/issue of distraction on the BYOd device from personal email, messaging, or whatever else the user accesses on their device? What impact will that have on the real ROI from a BYOD initiative and how will that be managed?

Guy
4 Votes
+ -
Of people who expect remote workers to use their own mobile data plans and minutes or home internet connections without compensation from their employer. Especially with the high cost of those same services.

Or those who think that it is alright for people to work outside of their paid hours without additional compensation for doing so. We already have problems with companies that try to avoid paying overtime by placing personnel on salary.
0 Votes
+ -
In most cases, the employees are asking for access to work data from their personal or home devices. If an employee doesn't want to come to the office, why should the employer foot the bill for his connection?
-1 Votes
+ -
Hmmm
Charles Bundy 15th May 2012
The thing to remember is whether this is mandated or optional. If you want to work from home, or use your own device there ain't no arrogance in expecting you to put skin in the game.
There are good leverage points for BYOD but it is not an end sum game. What you really are seeing is the convergence of BYOD, IT consumerization and Virtualization technologies that give a skilled technologist the ability to deliver a more dynamic "desktop" experience at same or better cost alignment. I guess what I am saying is you cannot just tell employees to buy a device.... of their choice... to use and then take away the IT support services they have grow accustiomed to.

Two comments: One, on the point that "staff have better equipment at home". Many staff have very aged euipment or simple do not know what they have. (smartphones being more ot the exception here). Two, call it "advising" or "guidance", it is still support.
I just dont see how a user wil say something along the lines of... "Don't worry, I will fix my own device since I'm the one who broke it in the first place..." If they are using it for work, they will demand tech support from the company, simple as that.

To think that you can draw the line simply because its personal its in my a crack induced fantasy. If you try to pull that off, it will only make your tech support group "look" in the eyes of users like the biggest jerks in the world.
I just wonder how many of those loaners will be adopted by the employees using them on a semi-permanent basis.
2 Votes
+ -
re: #4
MyopicOne 14th May 2012
The data is ALWAYS more important than the device...
I wonder how users would feel if command central told their personal device to wipe itself. Or that there was even the possibility that said device could be wiped thus losing their personal data along with the work related information.

With BYOD both sides lose control of where the line is drawn between personal and professional usage.
Keyboard Shortcuts:
Prev
Next
Toggle
Join the conversation
Formatting +
BB Codes - Note: HTML is not supported in forums
  • [b] Bold [/b]
  • [i] Italic [/i]
  • [u] Underline [/u]
  • [s] Strikethrough [/s]
  • [q] "Quote" [/q]
  • [ol][*] 1. Ordered List [/ol]
  • [ul][*] · Unordered List [/ul]
  • [pre] Preformat [/pre]
  • [quote] "Blockquote" [/quote]

Join the TechRepublic Community and join the conversation! Signing-up is free and quick, Do it now, we want to hear your opinion.