Live data from Hacker News

IBM bans USB, SD cards, flash drives and portable devices from every office

theregister.co.uk

141–150 of 202 posts

Re: IBM bans USB, SD cards, flash drives and portable devices from every office

#141
post #134

This is a third-hand story. Most of it is lifted verbatim from the PCMag article ... * https://www.pcmag.com/news/361098/ibm-employees-cant-use-rem... ... which is in turn sourced from an article in The Register . * https://www.theregister.co.uk/2018/05/10/ibm_bans_all_remova...

Thank you so much for pointing that out! As the author of the original, it's irksome to see kudos (and revenue) go to outlets that re-re-report a story.

Re: IBM bans USB, SD cards, flash drives and portable devices from every office

#142
post #34
post #19

Don’t FB and Goog already do this in practice if not completely enforced (i.e. epoxying the connectors). What’s the news about this?

Since USB is how you debug on Android and even flash the software, that doesn't ring true. If the Uber case is any indication, they instead give you all the freedom but essentially rootkit the system and keep very comprehensive logs and access controls.

you don't need USB, it can be done using WiFi

Re: IBM bans USB, SD cards, flash drives and portable devices from every office

#143

Earlier quoted context omitted.

I've never had a problem converting modest amounts of CNY USD at any bank in China or in the USA. Are you referring to capital export controls (~100k CNY/year)?

> Are you referring to capital export controls (~100k CNY/year)? Yes.

Sorry, this is not true.

I live and work in China and move far than that a year. Also the NZ / Australian property markets are both in a bubble caused by Chinese cash investment by wealthy individuals, 100k CNY won't buy anything.

100k CNY is only 15k USD.

Re: IBM bans USB, SD cards, flash drives and portable devices from every office

#144
This is a security move to prevent more documents getting leaked. They're under fire for the ageism layoffs, which were partially verified by leaked docs, and so they probably got paranoid.

Not that they shouldn't take this measure regardless. But there's a very specific reason it's happening now.

Re: IBM bans USB, SD cards, flash drives and portable devices from every office

#145

Earlier quoted context omitted.

If you're going through the trouble of epoxying USB ports, you could probably epoxy the mouse to its port as well. Or just monitor connected USB devices and shutdown if something unapproved is installed, a la USBKill. https://en.wikipedia.org/wiki/USBKill

If mouse is epoxied - cut the cable, cut and splice in a male->female cable, connect your device.

I think they are trying to discourage accidental use of/the urge to use the USB ports.

Re: IBM bans USB, SD cards, flash drives and portable devices from every office

#148
post #11

Product idea: a dongle with male & female USB connector, that you can place between USB drive and computer, and which catches possible security violations.

All USB data already has to go through your USB drivers. So you've got a software solution vector right there.

Re: IBM bans USB, SD cards, flash drives and portable devices from every office

#149
post #124

This is common at many semiconductor companies. Not only is it a ban at one specific semiconductor oem I know of, the usb-ports are disabled and the usb-ports on new issue computers are epoxied to prevent trying to use them. Semiconductor technology is one of the areas of global-technological competition which surely benefit from secrecy. For example, several years ago one of the c-level executives at this specific O…

I used to work in semi- in Asia, and it was pretty loose compared to Financial and Pharma. Maybe things have gotten tighter, but...

I think it depends on the tier at which the company does its business in. Is the OEM involved in the latest nodes, or are they working with sizes >100nm?

Secrets are kept tight for any company with any tech relating to the latest nodes <10nm. It just so happens that IBM has been working on sub-10nm processes for a long time, so they have a lot of secrets to keep, hence I am not surprised by the article heading.

Re: IBM bans USB, SD cards, flash drives and portable devices from every office

#150
post #148
post #11

Product idea: a dongle with male & female USB connector, that you can place between USB drive and computer, and which catches possible security violations.

All USB data already has to go through your USB drivers. So you've got a software solution vector right there.

Yeah, but software can be mismanaged.

Perhaps a solution would be a combination of the two. E.g. dongle converts USB protocol to (say) XYZ protocol, and software converts from XYZ protocol to readable filesystem.

Post reply on HN