News for hackers. Stuff that matters.

A comment on IBM bans USB, SD cards, flash drives and portable devices from every office. Parent comment

Re:IBM bans USB, SD cards, flash drives and portable devices... by Lionsion on Wednesday May 16, 2018 @03:05PM (#17085435)
If you're going through the trouble of epoxying USB ports, you could probably epoxy the mouse to its port as well.

Or just monitor connected USB devices and shutdown if something unapproved is installed, a la USBKill.

https://en.wikipedia.org/wiki/USBKill

[ Parent | on HN ]
Re:IBM bans USB, SD cards, flash drives and portable devices... by TeMPOraL on Wednesday May 16, 2018 @04:32PM (#17086200)
If mouse is epoxied - cut the cable, cut and splice in a male->female cable, connect your device.
[ Parent | on HN ]
Re:IBM bans USB, SD cards, flash drives and portable devices... by floatingatoll on Wednesday May 16, 2018 @08:42PM (#17087660)
Doing so would trigger a USB disconnection event, which under a sufficiently paranoid ecosystem would immediately terminate the entire enclosure and lock the door and call security.
[ Parent | on HN ]
Re:IBM bans USB, SD cards, flash drives and portable devices... by chrischen on Wednesday May 16, 2018 @08:17PM (#17087530)
I think they are trying to discourage accidental use of/the urge to use the USB ports.
[ Parent | on HN ]
Re:IBM bans USB, SD cards, flash drives and portable devices... by AstralStorm on Thursday May 17, 2018 @03:45AM (#17089544)
Epoxy is a pain, just use a sticky connector envelope instead.

USB disconnect disabling whole USB host is trivial to code. You would disable on disconnect instead of whitelisting as there can be USB host bugs. Add a boot password so that only admin can start the machine...

Plus the are solutions where drivers are also put in a VM to further reduce attack surface.

[ Parent | on HN ]