Reply to Message

it's not just about autorun...

cnstarzz 29th Oct 2009

I work at one of the NOSC's. They didn't just ban USB flash devices because of the worm. They banned them because no matter how much you try to educate the users on safe practices like OPSEC and COMSEC, users will always jack something up. They will transfer stuff from Classified to Unclassified systems without Toolboxing the materials to make sure they were safe for the Unclass network.

Transferring files isn't impossible. On some networks they've made USB flash drives allowable, however, you must register them with the NCC and each USB flash drive can only be used on a specific computer. If the the USB drive is plugged in anywhere else, the computer's port is immediately shut off, and an email is automatically sent to the NCC with the computer name and the logon name of the user that plugged it in. And, the user's account is automatically disabled. Also, CD/DVD transfer is very easy. They just need a CSA/WGM that has admin rights to use the CD burner. It's not a difficult process by any means.