Live data from Hacker News

IBM bans USB, SD cards, flash drives and portable devices from every office

theregister.co.uk

171–180 of 202 posts

Re: IBM bans USB, SD cards, flash drives and portable devices from every office

#171

Earlier quoted context omitted.

If you honestly don't know why I will explain it to you. It is because it is theft. If I were to steal some or all of your possessions and give it to the disadvantaged, then I suppose you shouldn't honestly get all that upset about it, but I doubt that would happen.

> In economic terms, intellectual property is non-rival, whereas tangible property is rival. As a result, the “piracy” of intellectual property is simply not the same sort of zero-sum game that car theft — or theft of any tangible property — is. And that means that when Hollywood or the U.S. government says that music or movie downloaders are “pirates” or “thieves,” they are indulging in a bit of loose rhetoric. Ther…

This is a popular argument but I think it is wrong because it uses the wrong analogy. I'll illustrate.

If I buy a candy bar at the store for $0.99 and then you steal it, now you have it and I don't. I'm out $0.99 of value and you stole $0.99 of value.

But what if you steal the candy bar directly from the store? You got $0.99 of value, but the store didn't pay $0.99 for that candy bar; they may have only paid $0.40. What you actually stole from them was two things: $0.40 of inventory and $0.59 of foregone revenue.

Even if you drop $0.40 on the counter as you walk out the door, it would still be considered a theft because the store gets to decide what their retail prices are, not you. You're still stealing $0.59 of foregone revenue.

IP products essentially have an "inventory" cost near zero. Yet, if you take a song or a trade secret without paying for it, you're still taking their foregone revenue. Just like dropping $0.40 on the counter for a $0.99 candy bar, you're dropping $0.00 on the counter for a $0.99 song or $1 million trade secret. Reimbursing someone's inventory cost (even if it's $0.00) does not mean there is no theft occurring.

While the IP itself is non-rival, the revenue from each sale is rival; that is, if you acquire my IP via a pirated copy then I still have my IP, but I don't have the revenue from selling you my IP.

Re: IBM bans USB, SD cards, flash drives and portable devices from every office

#172

This is common at many semiconductor companies. Not only is it a ban at one specific semiconductor oem I know of, the usb-ports are disabled and the usb-ports on new issue computers are epoxied to prevent trying to use them. Semiconductor technology is one of the areas of global-technological competition which surely benefit from secrecy. For example, several years ago one of the c-level executives at this specific O…

> the usb-ports are disabled and the usb-ports on new issue computers are epoxied to prevent trying to use them.

How are they planning to use new laptops that are powered via usb-c?

Re: IBM bans USB, SD cards, flash drives and portable devices from every office

#173

Earlier quoted context omitted.

> In economic terms, intellectual property is non-rival, whereas tangible property is rival. As a result, the “piracy” of intellectual property is simply not the same sort of zero-sum game that car theft — or theft of any tangible property — is. And that means that when Hollywood or the U.S. government says that music or movie downloaders are “pirates” or “thieves,” they are indulging in a bit of loose rhetoric. Ther…

This is a popular argument but I think it is wrong because it uses the wrong analogy. I'll illustrate. If I buy a candy bar at the store for $0.99 and then you steal it, now you have it and I don't. I'm out $0.99 of value and you stole $0.99 of value. But what if you steal the candy bar directly from the store? You got $0.99 of value, but the store didn't pay $0.99 for that candy bar; they may have only paid $0.40. W…

Industrial >EspionageAs far as taking externalities into account: If someone doesn't behave to be "carbon-neutral" are they stealing from everyone?

Furthermore, the position you are defending is presupposing the ontological position that IP is Property. (Which might not hold in other cultures/countries, specially a Socialist Country with Chinese Characteristics™)

Patent infringement isn't theft and winging it and saying otherwise without a good basis won't convince anyone.

[1]: https://www.wikiwand.com/en/Industrial_espionage

Re: IBM bans USB, SD cards, flash drives and portable devices from every office

#174

This is common at many semiconductor companies. Not only is it a ban at one specific semiconductor oem I know of, the usb-ports are disabled and the usb-ports on new issue computers are epoxied to prevent trying to use them. Semiconductor technology is one of the areas of global-technological competition which surely benefit from secrecy. For example, several years ago one of the c-level executives at this specific O…

> Given their history of borrowing technology from other countries without attribution, Impressive choice of words!

To be fair, Chinese technologies were also borrowed by other countries in the last 2000+ years of human history.

Re: IBM bans USB, SD cards, flash drives and portable devices from every office

#175

This is common at many semiconductor companies. Not only is it a ban at one specific semiconductor oem I know of, the usb-ports are disabled and the usb-ports on new issue computers are epoxied to prevent trying to use them. Semiconductor technology is one of the areas of global-technological competition which surely benefit from secrecy. For example, several years ago one of the c-level executives at this specific O…

> the usb-ports are disabled and the usb-ports on new issue computers are epoxied to prevent trying to use them. How are they planning to use new laptops that are powered via usb-c?

They probably don't use laptops, since laptops can easily be taken off site.

Re: IBM bans USB, SD cards, flash drives and portable devices from every office

#176

Earlier quoted context omitted.

To be fair, they are not completely locked down like I may have made it sound. The usb port restriction is absolutely true for laptops, but colo desktops probably do not have this restriction, or just a more lax restriction. Also, its not true for all laptops of the company, but usb access does require explicit permissions and a new-issue laptop, so they do have a list of people who have riskier laptops, and may need…

I've seen the 'USB ports get taped up for a visiting engineers computer' thing before - so I wonder what they do with a MacBookPro nowadays (there is no separate display or power connector!)

They use a laptop suited for business, obviously.

Re: IBM bans USB, SD cards, flash drives and portable devices from every office

#177
post #25

Earlier quoted context omitted.

or unplug a mouse for 5 seconds

If you're going through the trouble of epoxying USB ports, you could probably epoxy the mouse to its port as well. Or just monitor connected USB devices and shutdown if something unapproved is installed, a la USBKill. https://en.wikipedia.org/wiki/USBKill

Epoxy is a pain, just use a sticky connector envelope instead.

USB disconnect disabling whole USB host is trivial to code. You would disable on disconnect instead of whitelisting as there can be USB host bugs. Add a boot password so that only admin can start the machine...

Plus the are solutions where drivers are also put in a VM to further reduce attack surface.

Re: IBM bans USB, SD cards, flash drives and portable devices from every office

#178
post #127

Earlier quoted context omitted.

So what transmission rate can you hope to get with this?

Depends quite a bit on what you have. I've seen about 10 kbps over air and 64 kbps over cable

It is pretty conspicuous over the air though. It also won't get rid of watermarks.

TEMPEST is probably easier and more reliable than this.

Re: IBM bans USB, SD cards, flash drives and portable devices from every office

#179

Earlier quoted context omitted.

This is a popular argument but I think it is wrong because it uses the wrong analogy. I'll illustrate. If I buy a candy bar at the store for $0.99 and then you steal it, now you have it and I don't. I'm out $0.99 of value and you stole $0.99 of value. But what if you steal the candy bar directly from the store? You got $0.99 of value, but the store didn't pay $0.99 for that candy bar; they may have only paid $0.40. W…

Industrial >Espionage As far as taking externalities into account: If someone doesn't behave to be "carbon-neutral" are they stealing from everyone? Furthermore, the position you are defending is presupposing the ontological position that IP is Property. (Which might not hold in other cultures/countries, specially a Socialist Country with Chinese Characteristics™) Patent infringement isn't theft and winging it and sa…

If someone isn't carbon neutral, they are in essence poisoning future generations.

Re: IBM bans USB, SD cards, flash drives and portable devices from every office

#180

Earlier quoted context omitted.

> In economic terms, intellectual property is non-rival, whereas tangible property is rival. As a result, the “piracy” of intellectual property is simply not the same sort of zero-sum game that car theft — or theft of any tangible property — is. And that means that when Hollywood or the U.S. government says that music or movie downloaders are “pirates” or “thieves,” they are indulging in a bit of loose rhetoric. Ther…

This is a popular argument but I think it is wrong because it uses the wrong analogy. I'll illustrate. If I buy a candy bar at the store for $0.99 and then you steal it, now you have it and I don't. I'm out $0.99 of value and you stole $0.99 of value. But what if you steal the candy bar directly from the store? You got $0.99 of value, but the store didn't pay $0.99 for that candy bar; they may have only paid $0.40. W…

Best analogy on this subject I've seen. I am sure there are a couple of issues that are left out, but it works for my needs (I am not a lawyer).
Post reply on HN