| | |
USB or not USB
Interesting that the US Department of Defense has banned thumb drives. The problem is that they can carry viruses and infect computers - and if your nation's defense depends on these systems (and by extension in the case of the US so does the defense of the rest of the world) they need to be looked after. So no thumb drives, no CDs.
Umm...yes.
But if you're going to take this seriously let's have a look at other removable storage. Here's a list, top of my head, of potentially virus-carrying items I could lay my hands on in my office within 30 seconds:
'Flip' video camera
Still camera
Voice recorder
iPod
Phone
OK, it's only five and the voice recorder is really easily identifiable as storage. The media players and phones and particularly cameras are less so, though.
Tell you what. How about a new idea? Instead of all this stuff about singling out thumb drives and whatnot because they're a risk, how about ordering some new hardware - like PCs without a USB socket in the first place? We all know they're available, and if you really need a peripheral or something connected you could have a hub of some sort connected by WiFi. Then innocent people could carry their thumb drives, phones and cameras around with them without any need to worry - and malicious people with USB drives disguised as something else (I've seen pens, watches) wouldn't have anything to plug them into.
Someone's going to tell me why this idea sucks, I know they are. I just can't see the flaw in it from here.
Umm...yes.
But if you're going to take this seriously let's have a look at other removable storage. Here's a list, top of my head, of potentially virus-carrying items I could lay my hands on in my office within 30 seconds:
'Flip' video camera
Still camera
Voice recorder
iPod
Phone
OK, it's only five and the voice recorder is really easily identifiable as storage. The media players and phones and particularly cameras are less so, though.
Tell you what. How about a new idea? Instead of all this stuff about singling out thumb drives and whatnot because they're a risk, how about ordering some new hardware - like PCs without a USB socket in the first place? We all know they're available, and if you really need a peripheral or something connected you could have a hub of some sort connected by WiFi. Then innocent people could carry their thumb drives, phones and cameras around with them without any need to worry - and malicious people with USB drives disguised as something else (I've seen pens, watches) wouldn't have anything to plug them into.
Someone's going to tell me why this idea sucks, I know they are. I just can't see the flaw in it from here.
0
•
•
•
•
Better still use appropriate security measures to prevent unauthorised devices from being connected in the first place, it is not rocket science. That way you still get the benefits of USB without the dangers. We do not want a return to the 'good old days' where IT Admins superglued USB ports to prevent them being used.
0
•
•
•
•
The main problem is that if people really want to get round whatever security measures you've put in place - they will. People have far more knowledge about various systems now than they did just a couple of years ago, need to email a report but it wont let you upload a file from an external source?
Someone in the office will always know how to get round it. Sure you could order a batch of shiny new base units with no USB ports. But they'll still have an internet connection, so you're pretty much back to square one.
Before any internal data theft occurs; someone somewhere believes they can do it. That's what companies need to work on - eliminating that thought. Once people believe they can; they'll most certainly try.
Someone in the office will always know how to get round it. Sure you could order a batch of shiny new base units with no USB ports. But they'll still have an internet connection, so you're pretty much back to square one.
Before any internal data theft occurs; someone somewhere believes they can do it. That's what companies need to work on - eliminating that thought. Once people believe they can; they'll most certainly try.
Similar Threads
- USB Dismount not turning off my USB Drive? (C++)
- can not see USB flash drive -USB port not responding? (Windows 95 / 98 / Me)
- Convert USB Flash to USB dongle (C#)
- USB enhanced port running at usb 1 speed (PCI and Add-In Cards)
- USB Disaster - power suge messages and USB malfunction (Windows NT / 2000 / XP)
| Thread Tools | Search this Thread |
adobe advice antivirus apple botnet browser business cellphone china conspiticy crime cybercrime daniweb data database dataloss development dns domains dos email emailretention encryption exploit facebook firefox flash fraud gadget google government hack hacker hacking hardware idtheft ie8 information internet iphone ipod kaspersky law leopard linux mac malware mcafee mckinnon michaelknight microsoft mobile mozilla nasa news obama os password passwords patch pdf phishing privacy redhat report research review sans satnav scam search security socialnetworking software sophos spam spyware sqlinjection strider survey symantec terrorism trends trojan twitter typo-squatting uk usb virus vista vulnerability warning web webmail website windows windows7 worm xp zeroday




