Thursday, November 20, 2008

Our Military Bans USB ThumbDrives, etc.

If you remember "Don't Copy That Floppy!", then you've been through this before. The Viruses, Trojans, and other crud collectively called Malware will get onto computers via any path available. USB Thumbdrives are now very cheap and easy to use as part of a sneaker-net. Unfortunately, they're just as convenient for personal use and this is how malware usually finds it's way into corporate / work / military systems. Scan a computer used by a young adult, and you'll likely find a variety of malware waiting for a chance to spread itself around. In theory, we should all scan our systems before writing files to an external device, but in practice most of us don't even scan our systems on a regular schedule.

In the near future I expect the technology to scan and secure thumb drives will be miniaturized and built into the devices themselves. A few years later, the prices will have come down to the level that we mere mortals consider reasonable, and the hackers will have to find another delivery mechanism. History shows that they will succeed.

Practice Safe Computing!

Under Worm
Assault, Military Bans Disks, USB Drives Danger Room from Wired.com
:
"The Defense Department's geeks are spooked by a rapidly spreading worm crawling across their networks. So they've suspended the use of so-called thumb drives, CDs, flash media cards, and all other removable data storage devices from their nets, to try to keep the worm from multiplying any further.

It applies to both the secret SIPR and unclassified NIPR nets. The suspension, which includes everything from external hard drives to "floppy disks," is supposed to take effect "immediately." Similar notices went out to the other military services.

In some organizations, the ban would be only a minor inconvenience. But the military relies heavily on such drives to store information. Bandwidth is often scarce out in the field. Networks are often considered unreliable. Takeaway storage is used constantly as a substitute."

No comments: