Security Basics mailing list archives

RE: A question about USB Storage.


From: "Burton Strauss" <BStrauss3 () comcast net>
Date: Tue, 2 Aug 2005 15:18:07 -0500

That just makes the risks from unwiped temporary storage worse - all the bad
guy has to do is grab the pen drive and walk off.  Sure the computer will
crash, but s/he now has 1GB of stuff to mine for 'interesting' data...

Other problems are related to the basic reality of flash - which are:
  block vs. byte organization
  a limit on the number of read/write cycles (1M or 10M and poof, the chip
is shot, as low as 1K for older models - which can be a problem for the FAT
table).

Lastly, there seems to be a capacity wall at 1GB (months after being
promised, these are only now in very limited availability).

-----Burton
 

-----Original Message-----
From: Carlos Manuel de La Concha Canedo [mailto:ofeyccc1 () prodigy net mx] 
Sent: Tuesday, August 02, 2005 12:08 AM
To: security-basics () securityfocus com
Subject: A question about USB Storage.

Dear List Members,

I have been reading threads recently about recovering temporary data such as
swap file, temp files, et al.
If the information in the swap file and other system temporal files its so
important ¿why don´t put it in a usb device?
With a usb capacity of about 4 GB it could be a solution (and an added
complication) for the security of such files.

It´s possible to do it? In windows? In linux? In Freebsd?

I think that the sistem could include a function to erase the usb device at
logoff or shutdown, besides, could you prove that A specific usb device was
used in a specific computer?

Thanks for your attention


Ing. Carlos Manuel De La Concha Canedo
ofeyNET
Clavelinas 257-1
Colonia Nueva Santa María
02800, Azcapotzalco, Distrito Federal, México

"Cuando se siente herida, la ostra...
hace una perla."
Anónimo

--
No virus found in this outgoing message.
Checked by AVG Anti-Virus.
Version: 7.0.338 / Virus Database: 267.9.7/60 - Release Date: 28/07/2005
 


Current thread: