4 ms·

Interesting but seems kind of late, no? Even the US State Department has banned USB drives since at least 2008. I don't think US government is particularly we

• sailfast 8y ago
  Agreed - this doesn't seem like that big a step at all from a security perspective. The main change is that it will now force a bunch of folks to think about how they manage their data and their consulting teams especially will get annoyed with how "hard" it is to transfer that powerpoint deck for their presentation. Leaving data lying around on a stick is one vector. Malware and other considerations is quite another that should be discussed more often. Especially if your posture is jelly-filled. I'm guessing they got burned here at least once with a relatively large dataset that somebody left in a cafe somewhere.
• HillaryBriss 8y ago
  agree. US defense contractors limited moving electronic media in/out of their facilities back in the 90s, i think.
• jpalomaki 8y ago
  It’s one thing to ban stuff and another to actually provide practical solutions for people so that they can continue working. Banning stuff looks good on paper, but sometimes the clever work arounds people invent are then much worse than the original thing. Practical example from past. Policy denies creating user accounts for externals. In big orgs you anyways sometimes have the need to have some external do work on systems. Idealistic view is that employee baby sits the ext guy and performs everything on behalf of him. But in reality people have their own work and deadlines, so it becomes tempting to just log on and let the ext work on your credentials.