Comments on: Defending against U3 & Switchblade

By: dante

dante — Sun, 04 Mar 2007 13:56:17 +0000

hello bill, i had a question about your switchblade article, i am not sure switchblade can run if the screen is password protected. i have tried on two laptops, and it only works when the screen is not locked. if i have missed something, please let me know… thanks for your time.

By: edgeblog » 10 New Immutable Laws of IT Security

edgeblog » 10 New Immutable Laws of IT Security — Mon, 23 Oct 2006 23:25:44 +0000

[...] An unsupervised janitor is the richest guy in your company – See rule 4. As I’ve discussed before, a USB key with U3 and a PC with AutoPlay is all it takes to get passwords, install software, and generally 0wn a PC. Couple that with your administrator’s terminals and you have a recipe for disaster. Would you really trust your janitor to do the right thing if I offered him $1,000 to plug a USB drive into a PC for 10 minutes and then bring it back to me? Physical security extends beyond the data center to include every system that has privileged access. How secure are your admin’s home PCs? Your CIO’s? [...]

By: Bill

Bill — Mon, 23 Oct 2006 18:50:06 +0000

Nice piece!