Some of you may remember hearing about the DoD's ban on USB devices a while back. At the military site I worked at until recently, the accepted procedure was to use FireWire drives (without USB ports) instead.
This was the source of no shortage of confusion to us technical types since, once you get past the device driver level, any attack vector should work as wel on a FireWire drive. I suspect that the strategy didn't blow up in somebody's face because it did tend to kill off "casual" file copying (i.e., the FW drive was a more deliberate copy that had not likely been attached to as many or varied a set of computers).
JR
This was the source of no shortage of confusion to us technical types since, once you get past the device driver level, any attack vector should work as wel on a FireWire drive. I suspect that the strategy didn't blow up in somebody's face because it did tend to kill off "casual" file copying (i.e., the FW drive was a more deliberate copy that had not likely been attached to as many or varied a set of computers).
JR
