Re:Tampa teen accused of being ‘mastermind’ behind Twitter hack
by i1856511 on Friday July 31, 2020 @09:12PM
(#24016347)
This seems silly. Network admins can determine he inserted a CD and respond immediately in person - but nonetheless issue PCs with CD-ROMs and the ability to interact with removable media?
Re:Tampa teen accused of being ‘mastermind’ behind Twitter hack
by stqism on Saturday August 01, 2020 @12:59AM
(#24017793)
If it’s anything like the DoD does, the reason USB ports and CD drives aren’t physically disabled is because sometimes using authorized devices and media is required to perform your official duties.
Re:Tampa teen accused of being ‘mastermind’ behind Twitter hack
by solipsism on Saturday August 01, 2020 @12:46AM
(#24017711)
And the same acquaintance described those NSA security protocols to you, who are now talking about them in a public forum. If your acquaintance actually did work for the NSA (God help us), he probably shouldn't have.
He said during his first week he made the mistake of putting a CD-ROM with some official training materials into his work system. Within 10 minute two people showed up to stop him and investigate what was going on with his computer. It was fine in the end but he was seriously reprimanded by his boss.
When you can’t trust users, the answer isn’t just to give up! It’s to acknowledge their fallibility and create a system that doesn’t rely on 100% compliance. In this case that means having software that instantly reports when any external media is connected.