Re: iPod is latest security risk for business, say analysts

[InfoSec News <isn () c4i org>]

Forwarded from: Richard Forno <rforno () infowarrior org>

Obviously the person writing this advisory isn't a security person nor
had much experience in the real world of operational IT business life.  
I also wonder where this person has been for the last several
years....portable storage devices are hardly a "new" security concern.

Let's not forget that floppy disks and CDs still come-and-go freely in
many organizations, and I've encountered only a handful of enterprises
that block known (and actively seek out unknown) webmail account
providers that otherwise serve as a nice conduit to "bypass perimeter
defenses."  And that's just for starters.

If one takes this fellow's guidance to its logical conclusion,
companies need to either get rid of all computers, get rid of all
employees, or strip-search everyone as they come and go each day.
While that definitely increases security, methinks it 'might' -- just
might -- kill productivity. :(

-rick
Infowarrior.org



> From: InfoSec News <isn () c4i org>
> Reply-To: isn () c4i org
> Date: Tue, 6 Jul 2004 04:52:37 -0500 (CDT)
> To: isn () attrition org
> Subject: [ISN] iPod is latest security risk for business, say analysts
>
> http://software.silicon.com/security/0,39024655,39121918,00.htm
>
> [Gartner rehashing old ISN posts?
> http://seclists.org/isn/2002/Mar/0002.html  :)   - WK]
>
>
> By Andrew Donoghue
> silicon.com
> July 06 2004
>
> Companies should consider banning portable storage devices such as
> Apple's iPod from corporate networks as they can be used to
> introduce malware or steal corporate data, according to an analyst.
>
> Small portable storage products can bypass perimeter defenses like
> firewalls and antivirus at the mailserver, and introduce malware
> such as Trojans or viruses onto company networks, claimed analyst
> house Gartner in a report issued this week. Analysts have warned for
> some time of the dangers of using portable devices, but the report
> points out these also now include "disk-based MP3 players, such as
> Apple's iPod, and digital cameras with smart media cards, memory
> sticks, compact flash and other memory media."



_________________________________________
Help InfoSec News with a donation: http://www.c4i.org/donation.html