News for hackers. Stuff that matters.

A comment on Moved a server from one building to another with zero downtime. Parent comment

Re:Moved a server from one building to another with zero dow... by bnastic on Wednesday August 05, 2020 @11:28AM (#24061892)
I have not yet seen this implemented anywhere in banks. HID devices are fine, but anything else USB (esp. storage) is locked out completely. One of those banks wouldn't even let temp staff send emails out of the bank from their work account.

(Due to various disability acts they can't really do it either, as the employer must provide their staff with hardware they require, e.g. ergonomic keyboards and mice)

[ Parent | on HN ]
Re:Moved a server from one building to another with zero dow... by ThePadawan on Wednesday August 05, 2020 @11:43AM (#24062083)
That sounds really the wrong way around - the worst offenders in USB malware surely are flash drives that declare themselves as keyboards and input preprogrammed keyboard events (like the USB Rubber Ducky [0])!

(For your parenthetical I should clarify - it wasn't the case that it was impossible to whitelist other devices, it just had to be done on a case-by-case basis. I.e. you would call IT and say "Jen from accounting at machine foo123 needs her new ergonomic mouse to be recognized" and they would remote in, tell Jen to unplug and replug the device and whitelist that exact USB device id on that exact machine.)

[0] https://shop.hak5.org/products/usb-rubber-ducky-deluxe

[ Parent | on HN ]
Re:Moved a server from one building to another with zero dow... by bnastic on Wednesday August 05, 2020 @06:32PM (#24066339)
It may be so, but I'm talking from experience - as a keyboard geek I have, over the past ten years, taken all sorts of weird keyboards (and mice) into various big banks with not a hint of trouble. USB storage, on the other hand, qualifies for an instant termination.
[ Parent | on HN ]