Re:IBM bans USB, SD cards, flash drives and portable devices...
by jacquesm on Wednesday May 16, 2018 @04:59PM
(#17086439)
And if you're willing to run a lot of screencaps or re-type the stuff you see on another computer you can still get the data out. Before modems were common in the hands of unwashed masses my friend and I would transfer files on the phone by spelling out blocks in hex. Slow but with a checksum every 16 bytes it was good enough to get some work done. If the data is high value enough it would probably be worth it.
[ Parent
| on HN ]
Re:IBM bans USB, SD cards, flash drives and portable devices...
by mseebach on Wednesday May 16, 2018 @05:08PM
(#17086513)
Airgapped exfil is a whole research field. Priority one is making accidental leaks or infections all but impossible. Priority two is making large scale intentional leaks as slow and difficult as possible. As long as there are human eyes on the data, some level of leaking is possible.
Re:IBM bans USB, SD cards, flash drives and portable devices...
by dogma1138 on Wednesday May 16, 2018 @05:35PM
(#17086715)
Any host based DLP will monitor and block screen caps you also need to get them out some how.
Printing will also be heavily restricted and monitored.
Sure no DLP solution would beat pen and paper but that’s not a good way to exfiltrate data these days and a security guard checking people leaving a restricted area would be a good enough way to plug any leaks.
Re:IBM bans USB, SD cards, flash drives and portable devices...
by ekovarski on Thursday May 17, 2018 @11:21PM
(#17098434)
All of these technologies are great to prevent employees from casually stealing data but as history has proven, usually while the front is well guarded, the back end many times has quite a few holes for hackers to exploit. It's like they say, the most secure computer is the one not connected to the network.
Re:IBM bans USB, SD cards, flash drives and portable devices...
by dogma1138 on Friday May 18, 2018 @09:35PM
(#17106150)
People like to dramatize things way too much, most "breaches" are accidental there are 1000's of companies that manage to keep their data secure on a daily basis despite targeted attacks.
With a few exceptions it's much easier to either poach your competitors or simply buy them outright which is why "corporate espionage" is mainly employed by nation states these days that need to catch up. It's also important to note that stealing a design isn't that useful these days since you are too far gone what would be more important especially in the semi industry is to know the characteristics of a specific design or process in order to be able to preemptively position your offerings to compete without giving up any unnecessary ground.