Live data from Hacker News

IBM bans USB, SD cards, flash drives and portable devices from every office

theregister.co.uk

41–50 of 202 posts

Re: IBM bans USB, SD cards, flash drives and portable devices from every office

#41
post #25

Earlier quoted context omitted.

Are cases locked / glued shut? It seems like it would be easy enough to connect a new usb header...

or unplug a mouse for 5 seconds

If you're going through the trouble of epoxying USB ports, you could probably epoxy the mouse to its port as well.

Or just monitor connected USB devices and shutdown if something unapproved is installed, a la USBKill.

https://en.wikipedia.org/wiki/USBKill

Re: IBM bans USB, SD cards, flash drives and portable devices from every office

#42
post #13

This is already standard practice for several industries. For example, you’d be hard pressed to find a pharma company nowadays that allows the use of any removable media. The likely “replacement” is that IBM employees will have to use some sort of corporate VPN to work remotely.

They already do.

Re: IBM bans USB, SD cards, flash drives and portable devices from every office

#43
post #3

I remember they came to our school to show off their new hot desk software they wrote. Look how efficiently we can use space! I saw it as saying your so unimportant we won't even give you a dedicated desk. Now apparently you can't even use common tools to get the job done. If I had a big meeting I wouldn't take a chance on the network to keep my presentation.

Hot desking is actually a positive indicator for some people. It means they only expect you in the office intermittently.

Re: IBM bans USB, SD cards, flash drives and portable devices from every office

#44

Office workers will be fine. It's the field people that are going to have it rough. Even the best 4G LTE stick won't matter if you're installing in the basement of a huge complex.

First, if USB sticks are out for data exfil reasons, 4G sticks (and anything else that isn't a HID device) are out as well.

Second, such networks generally have an approved way of getting data on to them, typically involves handing your USB stick or DVD to someone with access to a particular machine with unblocked ports and specially firewalled off access to a particular shared drive on the network, and nothing else.

Re: IBM bans USB, SD cards, flash drives and portable devices from every office

#45

This is common at many semiconductor companies. Not only is it a ban at one specific semiconductor oem I know of, the usb-ports are disabled and the usb-ports on new issue computers are epoxied to prevent trying to use them. Semiconductor technology is one of the areas of global-technological competition which surely benefit from secrecy. For example, several years ago one of the c-level executives at this specific O…

> Given their history of borrowing technology from other countries without attribution,

Impressive choice of words!

Re: IBM bans USB, SD cards, flash drives and portable devices from every office

#46
post #26

This is common at many semiconductor companies. Not only is it a ban at one specific semiconductor oem I know of, the usb-ports are disabled and the usb-ports on new issue computers are epoxied to prevent trying to use them. Semiconductor technology is one of the areas of global-technological competition which surely benefit from secrecy. For example, several years ago one of the c-level executives at this specific O…

How do you connect a keyboard or mouse?

[deleted]

Re: IBM bans USB, SD cards, flash drives and portable devices from every office

#47

Surprised it took them so long. Outside of exfiltration, there's the issue with sketch USB sticks with malware making their way on to your network. It's amazing how many people will plug in any flash drive they find in a parking lot.

There's a very large Cryptocurrency convention taking place in New York right now, and I wonder how many USB drives are "lost" in the area.

Re: IBM bans USB, SD cards, flash drives and portable devices from every office

#49
post #34
post #19

Don’t FB and Goog already do this in practice if not completely enforced (i.e. epoxying the connectors). What’s the news about this?

Since USB is how you debug on Android and even flash the software, that doesn't ring true. If the Uber case is any indication, they instead give you all the freedom but essentially rootkit the system and keep very comprehensive logs and access controls.

Right, I don’t think they disable USB, but more like you’re not supposed to use it, unless it’s within your job description because they keep logs and will do a forensic file search if they system is tripped.

Re: IBM bans USB, SD cards, flash drives and portable devices from every office

#50
post #13

This is already standard practice for several industries. For example, you’d be hard pressed to find a pharma company nowadays that allows the use of any removable media. The likely “replacement” is that IBM employees will have to use some sort of corporate VPN to work remotely.

They already do.

I thought IBM was ending their remote work options?
Post reply on HN