Microsoft Ex-Chief to Launch Web-Based Software
prostoalex writes "Search for Paul Maritz and you're most likely to find Microsoft references. However, next month his new venture, PiCorp will start distributing Web-based software applications that might compete directly with Microsoft offerings. Former Microsoft exec also has an opinion on the future of software industry: '"The strength of the PC is also its weakness," Maritz says. "People don't want a single dedicated computer. They don't want their whole lives bound up in one piece of hardware. People want to get access wherever they are, from whatever device they're using."'"
Actually, I like having all of my stuff in one place...
The USB thumb drive is vulnerable to the same types of boot sector viruses and trojan loaders that were making the rounds back when 3.5" floppy disks were in more common use. In fact, there is a recent example, discussed right here on Slashdot, concerning a computer security company which designed just such a virus to show a client how an attack, when combined with a clever bit of social engineering (i.e. the free stuff gambit), could be accomplished. If you are plugging your USB thumb drive into unknown hosts as you go about your day then you are asking for trouble.
Social Engineering w/USB Drives
It wasn't a virus, it was a trojan. Important difference, because it could not, as you suggest, somehow spread to other usb devices. The point was that they gave away free USB disks with the trojan on it, and waited to see how many people would run it. Lots, unsurprisingly.
Yes, a virus could target removable media and files on a USB drive could be infected. But that's ok, because you're keeping your own AV up to date, right? Also, depending on how you're mounting the encrypted data on that USB drive (because you are encrypting it, right?) the virus may not be able to write to it at all. If you're mounting the device as a drive/mount point, then it probably will, otherwise probably not.