* Posts by Vinanti Benton

1 post • joined 17 Feb 2009

Storage vendor bloggers - losing data or losing the plot?

Vinanti Benton
Black Helicopters

Wrong and Right

Chris, you're on the wrong side of this issue, but for technically innocent reasons. Val has exposed a malicious attack scenario (involving user-generated MD5 collisions) which archiving developers like me had never accounted for back in 2003/2004 when we developed our initial integration with the Centera API.

Bottom-line, all of the early archiving implementations on Centera upto version 1.2 (including KVS, IXOS, iLumin, EDUCOMM, et al) are vulnerable to this data loss scenario because EMC configured collision detection OFF as the default in order to enable the popular Single Instance Storage (SIS) feature.

That means this troublesome Symantec KB article has relevance on the Centera side of the equation, not just the EV side.

See my latest update on why and how:

http://blogs.netapp.com/exposed/2009/02/its-never-the-u.html?cid=148736695#comment-148736695

0
0

Forums