29 Jun

Schneier on Security – Yet Another “People Plug in Strange USB Sticks” Story

Maybe it would be if the response if 60% of people tried to play the USB sticks like ocarinas, or tried to make omelettes out of the computer disks. But not if they plugged them into their computers. That’s what they’re for.

People get USB sticks all the time. The problem isn’t that people are idiots, that they should know that a USB stick found on the street is automatically bad and a USB stick given away at a trade show is automatically good. The problem is that the OS trusts random USB sticks. The problem is that the OS will automatically run a program that can install malware from a USB stick. The problem is that it isn’t safe to plug a USB stick into a computer.

Quit blaming the victim. They’re just trying to get by.

via Schneier on Security – Yet Another “People Plug in Strange USB Sticks” Story. Have to agree with Bruce Schneier, the problem isn’t people plugging a device into their computer for which they have no reason to suspect harm from.