Security Basics mailing list archives

Re: A question about USB Storage.


From: Alexander Klimov <alserkli () inbox ru>
Date: Wed, 3 Aug 2005 15:03:51 +0300 (IDT)

On Tue, 2 Aug 2005, Carlos Manuel de La Concha Canedo wrote:
If the information in the swap file and other system temporal files its so
important ?why don?t put it in a usb device?
With a usb capacity of about 4 GB it could be a solution (and an added
complication) for the security of such files.

It?s possible to do it? In windows? In linux? In Freebsd?

Yes it is possible (at least on Linux and FreeBSD, but, probably also
on Windows), pointless from security and performance POVs.

From security POV it is pointless because there is almost no way to
make sure that the data is deleted from the flash (note that the
controller most likely do some sector remapping since the number of
writes is limited) and it is much easier to steal your USB thingy than
your hard drive.

From the performance POV it is pointless because swap and temporary
files are the objects which are changed often and need high
throughput, so the system with flash for this purposes will be both
slow and will wear out the flash pretty soon.

-- 
Regards,
ASK


Current thread: