4

There is at the moment a single question with the tag . The meaning of the tag is recovering from a security breach. It's a bit like , but covering the aftermath rather than the immediate reaction.

Earlier today, there were a couple more questions with that tag, which were about recovering a forgotten password. I retagged them.

On the one hand, this meaning of seems reasonable. On the other hand, it's surprising that we'd end up with a single question about that topic. Is there a synonym that I've missed? Should we just use for everything? Should there be more questions tagged ?

5

Recovery should be a well used tag in business continuity or disaster recovery, however in looking for recovery type questions under there really isn't much. This suggests to me that maybe we have trimmed it down to:

Nuke it from orbit. It's the only way to be sure

Which is our general response. I think if we have more proper aftermath questions, ie the how we recover, what do we bring online first, how do we focus efforts after an attack or a natural disaster or even a systems failure, then the tag may be more useful.

  • 1
    I agree. recovery would make much more sense from a DR/BCP perspective. – Scott Pack Sep 17 '13 at 18:00
  • “Nuke it from orbit” only makes sense after a breach of integrity, and even then it's not the full story: you may need to e.g. revoke signatures. Recovering after a breach of confidentiality (as in the question) is a different matter. – Gilles Sep 17 '13 at 18:15
  • Oh, I agree - this question is definitely the right kind for the tag. My comment about nuking from orbit is that that so far is our usual answer for the types of questions we get (my box got hax0red - what nao?) – Rory Alsop Sep 17 '13 at 19:11
  • so wouldnt disaster-recovery be more appropriate (and specific) here? Or is the issue that it wasnt an actual "natural" disaster... And for that matter, is this not still within the scope of incident-response? – AviD Sep 18 '13 at 7:29
0

If we want a tag for systems for recovering a lost/forgotten password, I suggest creating a new tag like -- not trying to re-purpose for that.

seems to me like it's probably OK for questions on recovering from system compromise, but would also be OK: I have no opinion on choosing between those two.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .