Live data from Hacker News

IBM bans USB, SD cards, flash drives and portable devices from every office

theregister.co.uk

191–200 of 202 posts

Re: IBM bans USB, SD cards, flash drives and portable devices from every office

#191

Earlier quoted context omitted.

Physical inventory and IP are analogous in that they are both types of property that their owner intends to use to generate revenue (and hopefully profit). > it is much more complex process to valuate intangible assets such as ip. Please note that my argument above assigns a value of $0.00 to the IP itself. Even at that valuation, you can still commit theft by robbing me of the opportunity to use that IP to generate…

Your intention is irrelevant, limiting your opportunity is not theft. You're using that analogy as an emotional appeal to present the ip holder as a victim. Any competitor could limit your opportunity by releasing a functionally similar non infringing product. Would you choose the word 'robbing' in that circumstance? One would have to use your ip to create a competing product before it would even be copyright infring…

I think you need to go back up and carefully read from my first post. I'm not talking about competitive markets in general, I'm talking about a specific transaction where you end up with a product I'm selling, but I don't end up with the revenue I was asking for that product.

As an exercise: walk into Best Buy and pick up a $1,000 TV. On the way out, hand the cashier a check for the wholesale price of that TV. Have you just committed theft? And if so, what specifically have you stolen? You haven't deprived them of the TV itself, since you reimbursed them fully for that.

Re: IBM bans USB, SD cards, flash drives and portable devices from every office

#192

Earlier quoted context omitted.

Your intention is irrelevant, limiting your opportunity is not theft. You're using that analogy as an emotional appeal to present the ip holder as a victim. Any competitor could limit your opportunity by releasing a functionally similar non infringing product. Would you choose the word 'robbing' in that circumstance? One would have to use your ip to create a competing product before it would even be copyright infring…

I think you need to go back up and carefully read from my first post. I'm not talking about competitive markets in general, I'm talking about a specific transaction where you end up with a product I'm selling, but I don't end up with the revenue I was asking for that product. As an exercise: walk into Best Buy and pick up a $1,000 TV. On the way out, hand the cashier a check for the wholesale price of that TV. Have y…

Allow me to present an intangible analogy to illustrate... If I see a chair at ikea and they own a patent on it and I go home and make a chair based on their ip, but don't commercially manufacture and distribute it then did I steal a chair? If it is stolen what have I stolen exactly?

I guess my point is that my point is that ip is a liscense to manufacture and/or distribute rather than a total monopoly on the idea or demand for the product.

Re: IBM bans USB, SD cards, flash drives and portable devices from every office

#193
post #148

Earlier quoted context omitted.

All USB data already has to go through your USB drivers. So you've got a software solution vector right there.

Yeah, but software can be mismanaged. Perhaps a solution would be a combination of the two. E.g. dongle converts USB protocol to (say) XYZ protocol, and software converts from XYZ protocol to readable filesystem.

And hardware can't be mismanaged?

Re: IBM bans USB, SD cards, flash drives and portable devices from every office

#194
post #158

Earlier quoted context omitted.

Ok, we've changed to that original URL from https://boingboing.net/2018/05/10/ibm-bans-usb-sd-cards-flas... . Thanks!

Gosh, thanks! Certainly didn't expect the change or want to be seen as asking for it. But it's lovely that you did it so thanks!

We much prefer to have original sources. This is in the site guidelines actually: https://news.ycombinator.com/newsguidelines.html.

Re: IBM bans USB, SD cards, flash drives and portable devices from every office

#195

Earlier quoted context omitted.

And if you're willing to run a lot of screencaps or re-type the stuff you see on another computer you can still get the data out. Before modems were common in the hands of unwashed masses my friend and I would transfer files on the phone by spelling out blocks in hex. Slow but with a checksum every 16 bytes it was good enough to get some work done. If the data is high value enough it would probably be worth it.

Any host based DLP will monitor and block screen caps you also need to get them out some how. Printing will also be heavily restricted and monitored. Sure no DLP solution would beat pen and paper but that’s not a good way to exfiltrate data these days and a security guard checking people leaving a restricted area would be a good enough way to plug any leaks.

All of these technologies are great to prevent employees from casually stealing data but as history has proven, usually while the front is well guarded, the back end many times has quite a few holes for hackers to exploit. It's like they say, the most secure computer is the one not connected to the network.

Re: IBM bans USB, SD cards, flash drives and portable devices from every office

#196

Banning removable media is 100% the right direction (of course there needs to be exceptions for DSLRs and install media and whatnot, duh) The amount of idiocy I've seen with storing sensitive and work intensive documents in USB sticks is horrible.

yeah, except this is why it's happening now: https://features.propublica.org/ibm/ibm-age-discrimination-a... :

Fixed link: https://features.propublica.org/ibm/ibm-age-discrimination-a...

Re: IBM bans USB, SD cards, flash drives and portable devices from every office

#197

Earlier quoted context omitted.

It's always been an arms race and nations and companies have always strategically opened themselves up to acquire knowledge. When Germany was trying to catch up to the industrialised UK, they send business people to the UK to copy the layout of factory floors to reimplement them at home. For the longest time, Japan only allowed trade under restrictive conditions to maximise exposure to foreign technologies while mini…

If you honestly don't know why I will explain it to you. It is because it is theft. If I were to steal some or all of your possessions and give it to the disadvantaged, then I suppose you shouldn't honestly get all that upset about it, but I doubt that would happen.

Well if it's theft then it's been going on and used by everyone for thousands of years. To be upset about this is to be upset about gossip. It's an informal means to disseminate information. It will naturally occur in any sufficiently competitive system.

And the key point may be that the ones being 'stolen from' even allow it because the benefit they get from opening up to new markets usually exceeds the risk of having some of your IP copied.

It's not like the traders who ventured to Japan turned around just because they knew that the Japanese would try to catch up by any means, or that the British stopped trading with Germany. (Or that Apple stops to sell or build things in China)

Re: IBM bans USB, SD cards, flash drives and portable devices from every office

#198

Earlier quoted context omitted.

> Are you referring to capital export controls (~100k CNY/year)? Yes.

Sorry, this is not true. I live and work in China and move far than that a year. Also the NZ / Australian property markets are both in a bubble caused by Chinese cash investment by wealthy individuals, 100k CNY won't buy anything. 100k CNY is only 15k USD.

Are the capital restrictions only enforced on citizens or are there trivial workarounds? ("education" or "travel" expenses)

Re: IBM bans USB, SD cards, flash drives and portable devices from every office

#199

Earlier quoted context omitted.

Any host based DLP will monitor and block screen caps you also need to get them out some how. Printing will also be heavily restricted and monitored. Sure no DLP solution would beat pen and paper but that’s not a good way to exfiltrate data these days and a security guard checking people leaving a restricted area would be a good enough way to plug any leaks.

All of these technologies are great to prevent employees from casually stealing data but as history has proven, usually while the front is well guarded, the back end many times has quite a few holes for hackers to exploit. It's like they say, the most secure computer is the one not connected to the network.

People like to dramatize things way too much, most "breaches" are accidental there are 1000's of companies that manage to keep their data secure on a daily basis despite targeted attacks.

With a few exceptions it's much easier to either poach your competitors or simply buy them outright which is why "corporate espionage" is mainly employed by nation states these days that need to catch up. It's also important to note that stealing a design isn't that useful these days since you are too far gone what would be more important especially in the semi industry is to know the characteristics of a specific design or process in order to be able to preemptively position your offerings to compete without giving up any unnecessary ground.

Re: IBM bans USB, SD cards, flash drives and portable devices from every office

#200

Within a business, security has to be understood in the context of risk analysis. Will the measures taken damage the company more than the benefit of the increased security? In my eyes, banning storage media without a practical replacement is on the wrong side of the risk analysis equation. Sure, it's not desirable that files can be moved without full access control and auditing, but if people don't have a tool that…

I just bought a new SanDisk USB 3 drive and noticed it comes with SecureAccess software. It uses 128-bit AES encryption. Better than nothing, we could think IBM a large and successful long term tech company could make their own. But that doesn't support the cloud vision.
Post reply on HN