US Army Files Found On Second-Hand MP3 Player
MichaelSmith writes "A New Zealand man who bought a second hand MP3 player from a store in the US found it loaded with the names and personal details of American soldiers, as well as a mission briefing and information about equipment.
Chris Ogle says he will return the unit to the US Defense Department if asked, and that it never worked as a music player anyway.
A
slightly different version of the story is available from TVNZ."
The Army should ask for the return of the MP3 player (and pay for it), find out who put the files on it, and punish them. I don't expect that to happen.
In the land of the blind, the one-eyed man is usually crucified.
Hi,
i would expect this to happen on a daily basis. Usually the buyer will not be a journalist but some kid. The typical kid will say "boring stuff" and have those files deleted before finishing yawning. By doing so, they prevent more security leaks than most security officers.
Sincerly yours, Martin
Seriously, I'd just overwrite the device with a utility such as dban then keep my mouth shut, forever. This is the advice I'd offer anyone in this sort of situation. I actually take it a step further in that I dban _every_ used storage device I get without first looking to see what is on it, so I have no clue if I ever received something via a second-hand device that I should not have.
Except they would like you use the USB mouse, USB keyboard to actually do some work :-)
Easier to just lock the PC itself inside a cabinet so the end user doesn't have access to the box itself, just the keyboard, mouse, monitor.
Slashdot mods don't get Monty Python references? Dang it, the times they are a-changin...
The problem is, if you ban storage devices, you're gonna have to provide an equally convenient way to move data around. Otherwise everyone's going to find their own method, which may be as simple as emailing it around.
The issue is that rules are made, but the rulemakers don't realize the reason why people were doing what they were doing. Ban storage devices, and if someone still needs to get data from point A to point B, well, you've just got a bunch of people who are going to find a way to either circumvent the rule, or to find an alternative, which may not be as secure.
Banning the devices without an equally convenient alternative will just result in people finding workarounds. Just don't be surprised what those workarounds are. Interfere with people Getting Stuff Done(tm) without educating them on How to Get Stuff Done without X...