Re: USB Security

[Dave Aronson <spamtrap.secfocus () dja mailme org>]

"Marios Papaioannou" <m.papaioannou () cytanet com cy> wrote:

> From my point of view, the only 100% secure way to reduce the risk of
> usb is to disable the usb ports from bios.

...AND disable BIOS modification -- such as by using a tough password, 
not telling the user of course, and welding/padlocking the case shut so 
he can't just short the "Reset BIOS" jumpers, and even THEN the padlock 
could be picked or the weld chiseled out, but I think that's enough....

-- 
David J. Aronson
Work: http://destined.to/program
Play: http://listen.to/davearonson