PDA

View Full Version : British Military: iPods Pose Security Risk



Seraphim
07-13-2004, 10:08 AM
You think them using WinXP would be a security risk ;)


By Bernhard Warner, European Internet Correspondent

LONDON (*******) - Music fans, beware: Britain's Ministry of Defense has become the latest organization to add the iPod to its list of high-tech security risks.


The pocket-sized digital music player, which can store thousands of songs, is one of a series of banned gadgets that the military will no longer allow into most sections of its headquarters in the UK and abroad.

Devices with large storage capabilities -- most notably those with a Universal Serial Bus (USB) plug used to connect to a computer -- have been treated with greater suspicion of late by government agencies and corporations alike.

The fear is that the gadgets can be used to siphon information from a computer, turning a seemingly innocuous device into a handy tool for data thieves.

"With USB devices, if you plug it straight into the computer you can bypass passwords and get right on the system," RAF Wing Commander Peter D'Ardenne told *******.

"That's why we had to plug that gap," he said, adding that the policy was put into effect when the MoD switched to the USB-friendly Microsoft XP operating system over the past year.

In a survey of 200 mid-sized and large UK companies conducted by British security software firm Reflex Magnetics, 82 percent of respondents said they regard so-called mobile media devices like the iPod as a security threat.

As a result, a small but growing number of firms, particularly those in the financial and health care sectors, are devising policies to keep them out of their offices, said Andy Campbell, Managing Director of Reflex Magnetics.

"Oftentimes, a business has no idea if an employee is stealing data via removable media," Campbell said.

The findings reflect another report a week ago in which technology consultancy Gartner Inc. advised companies to consider banning the devices because they can also unwittingly introduce computer viruses to a corporate network.

"A portable media player with two gigabytes of capacity could easily store a customer database. And quickly," said Campbell.

oldsoak
07-13-2004, 01:13 PM
Most mil networks are firewalled off or completely seperate from the internet. PC's are provided by the MoD have operating sytems with modified kernels to make sure no additional hardware can be plugged in plus some form of user policy to make sure theres no plug and play as it were. Plus you've also got modified network operating systems with various security packages running to make things safe. Certainly all the places I've been screen you for anything pc or comms related . if you need to be contacted, they provide pagers as mobiles are a no no. The RAF chap is talking sense, but measures are already in place.

Royal
07-13-2004, 03:34 PM
Most mil networks are firewalled off or completely seperate from the internet. PC's are provided by the MoD have operating sytems with modified kernels to make sure no additional hardware can be plugged in plus some form of user policy to make sure theres no plug and play as it were. Plus you've also got modified network operating systems with various security packages running to make things safe. Certainly all the places I've been screen you for anything pc or comms related . if you need to be contacted, they provide pagers as mobiles are a no no. The RAF chap is talking sense, but measures are already in place.

Mobiles are used extensively in my experience. At one point a few years ago the secure VHF infrastructure was removed (MoD refused to pay to take it on) and we went to pay as you go sim cards in locally purchased handsets as the most secure form of comms (EW threat was low). The only theatre we didn't use them much was Afghanistan.

That said, and despite the almost total use of tough books IT security is hot. USB ports are certainly suspect, but it was a 264 guy that sold me on my iPod!

oldsoak
07-14-2004, 05:39 AM
Most mil networks are firewalled off or completely seperate from the internet. PC's are provided by the MoD have operating sytems with modified kernels to make sure no additional hardware can be plugged in plus some form of user policy to make sure theres no plug and play as it were. Plus you've also got modified network operating systems with various security packages running to make things safe. Certainly all the places I've been screen you for anything pc or comms related . if you need to be contacted, they provide pagers as mobiles are a no no. The RAF chap is talking sense, but measures are already in place.

Mobiles are used extensively in my experience. At one point a few years ago the secure VHF infrastructure was removed (MoD refused to pay to take it on) and we went to pay as you go sim cards in locally purchased handsets as the most secure form of comms (EW threat was low). The only theatre we didn't use them much was Afghanistan.

That said, and despite the almost total use of tough books IT security is hot. USB ports are certainly suspect, but it was a 264 guy that sold me on my iPod!

This will make you laugh. I was told that all non army issue comms or PC gear was allowed anywhere in the areas we work in - on account it not being tempest tested etc and potential dangers to
security . We were given contact numbers to use in the event of anyone wanting to get a message to us. OK doke, roger so far, we got the message. Then on exercise, we get a cluster of officers all with mobiles visit us, one of whom promptly starts giving directions to someone who has lost his way on how to get to us on his mobile. Good one.

martinexsquaddie
07-14-2004, 08:29 AM
Better
Off
With
Map
And
Nokia :roll: