• Visitors can check out the Forum FAQ by clicking this link. You have to register before you can post: click the REGISTER link above to proceed. To start viewing messages, select the forum that you want to visit from the selection below. View our Forum Privacy Policy.
  • Want to receive the latest contracting news and advice straight to your inbox? Sign up to the ContractorUK newsletter here. Every sign up will also be entered into a draw to WIN £100 Amazon vouchers!

Detecting USB Usage

Collapse
X
  •  
  • Filter
  • Time
  • Show
Clear All
new posts

    Detecting USB Usage

    My client has recently introduced rules around USB memory sticks. In short you can't use them... at all... unless you get explicit permission for a very specific limited use from like someone so high up you've never ever see them.

    This is a blow to me as 1) I use various bits of code and documents etc I have written/acquired over the years in my everyday work that are stored on the strick and 2) I keep limited company stuff on it and update timesheets, invoices, CVs etc when work is quiet

    I was told that the ominous 'they' would be able to detect when people were using them without authorisation. I'm not a hardware bod, but I'm pretty sceptical about this. Can anyone confirm? Secondly, what's the best alternative to using memory sticks? A good online file depository or something?

    Cheers. R
    It's about time I changed this sig...

    #2
    Originally posted by MrRobin View Post
    My client has recently introduced rules around USB memory sticks. In short you can't use them... at all... unless you get explicit permission for a very specific limited use from like someone so high up you've never ever see them.

    This is a blow to me as 1) I use various bits of code and documents etc I have written/acquired over the years in my everyday work that are stored on the strick and 2) I keep limited company stuff on it and update timesheets, invoices, CVs etc when work is quiet

    I was told that the ominous 'they' would be able to detect when people were using them without authorisation. I'm not a hardware bod, but I'm pretty sceptical about this. Can anyone confirm? Secondly, what's the best alternative to using memory sticks? A good online file depository or something?

    Cheers. R
    They probably can detect it - I'm sure they could make the OS log all USB usage should they so wish.

    The things is, I fail to see how these rules affect you as a contractor. You have been brought in to do a job, have been using a USB stick as part of that job since you have been there, and now they're telling you you can't. Sounds like D&C to me.

    Personally I'd carry on using it, and if they don't like it, then its time to move on. It's one thing following a rule that doesnt' affect your job, it's another when your method of working as a professional is compromised.
    Listen to my last album on Spotify

    Comment


      #3
      There are tools out there that can detect and prevent this stuff.

      Landesk, SMS, Zenworks etc.
      Politicians are wonderfull people, as long as they stay away from things they don't understand, like working for a living!

      Comment


        #4
        Some companies do deploy specialist software that prevents or allows USB usage and what exactly goes onto a stick or is copied off the stick - it's primarily to control the potential for data theft.

        Comment


          #5
          Originally posted by MrRobin View Post
          My client has recently introduced rules around USB memory sticks. In short you can't use them... at all... unless you get explicit permission for a very specific limited use from like someone so high up you've never ever see them.
          I had a similar thing at a client a while ago: they (that is, the IT bozos) wouldn't allow me to connect my MacBook to the network, wouldn't let me use a USB stick, wouldn't even let me write stuff to a CD-R and give it to somebody to copy onto the dev server. Everybody knew it was ridiculous, but it was "policy" and nobody wanted to rock the boat. Made being a web developer rather tricky.

          Originally posted by MrRobin View Post
          Secondly, what's the best alternative to using memory sticks? A good online file depository or something?
          The solution we eventually hit upon was quite simple and straightforward: they got IT to have an ADSL line installed for use when I visited, over which I would upload files to a directory on the server hosting my website, then send the guy at the desk next to me an email with a link to the file I'd just uploaded, so he could download it to his desktop machine and then copy it to the server.

          Seriously

          Comment


            #6
            Yeah I think it's in response to a recent data leakage... This is though, if it was malicious theft, then there are many other ways to get data out anyway (ftp, cd-writers, email etc etc) and if it was an accidental loss then this ban is akin to banning all knives from the cateen because someone once accidentily cut themselves. Grr!

            Anyway, it's not that big a problem, I suppose I can just email them to myself from home.
            It's about time I changed this sig...

            Comment


              #7
              Originally posted by NickFitz View Post
              I had a similar thing at a client a while ago: they (that is, the IT bozos) wouldn't allow me to connect my MacBook to the network, wouldn't let me use a USB stick, wouldn't even let me write stuff to a CD-R and give it to somebody to copy onto the dev server. ...
              Seriously
              I believe it. I once worked at a place where you needed permission to read a CD-R (including the install CD for the software I was to work on) and access to one particular guy's PC to read it. Forget about ever writing anything.

              Also, no external email, and webmail forbidden. As well as little things like being unable to change the screen saver or the (wrong) PC clock time.

              I didn't stay long.

              I have seen other banks with a policy of no USB, and no CD-writers; and internet use strictly business. If they add in no bringing in a laptop, you really have to decide whether you will work there. Personally I do believe that, while these choices are all the client's to make and take the consequences of, they are sufficiently abnormal in normal commercial work, that it is the client's responsibility to declare them in advance of the contractor making the decision whether to work there or not.
              Last edited by Methuselah; 15 August 2007, 09:19.
              Wissen ist Macht, aber nichts wissen macht nichts.

              Comment


                #8
                I managed all of the IT for a call centre and never allowed the use of USB sticks, didn't give the user access to floppies, external ports, CD..nothing. I made them use mandatory profiles and gave them only what they needed to do their job. They could not get access to the root of C: and could not create directories on the PC. They had no utilities to browse the PC and had no command prompt...so with all that in mind, the USB seems trivial..hehehe
                "If you can read this, thank a teacher....and since it's in English, thank a soldier"

                Comment


                  #9
                  Originally posted by Methuselah View Post
                  As well as little things like being unable to change the screen saver or the (wrong) PC clock time
                  Or the resolution!! I seem to have a penchant to have my screen res at a much higher setting than anyone else (poss something to do with 1920x1200 at home) and when I am stuck in like 800x600 it drives me mad. Looks like I have the accessibility options switched on.
                  It's about time I changed this sig...

                  Comment


                    #10
                    Originally posted by daviejones View Post
                    I managed all of the IT for a call centre and never allowed the use of USB sticks, didn't give the user access to floppies, external ports, CD..nothing. I made them use mandatory profiles and gave them only what they needed to do their job. They could not get access to the root of C: and could not create directories on the PC. They had no utilities to browse the PC and had no command prompt...so with all that in mind, the USB seems trivial..hehehe
                    The problems here are two, for me:
                    1. As part of my work, I bring knowledge on a USB stick. I also access it on the internet. I accept jobs on the basis of that being possible, and if it is not, any estimate or impression that I have given of being able to do the job on time, or at all, is rendered invalid.
                    2. I don't actually work for the client, I contract services to them. I no more undertake to spend all my office hours doing nothing but their job spec, than I undertake not to make or receive phone calls during office hours.
                    Wissen ist Macht, aber nichts wissen macht nichts.

                    Comment

                    Working...
                    X