đź”’ Cybersecurity for lawyers

User Tools

Site Tools

Trace:
usb_sticks

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Next revision		Previous revision
usb_sticks [2019/08/24 06:09] – created neilusb_sticks [2021/07/06 09:26] (current) – external edit 127.0.0.1
Line 2: Line 2:
 ====Key points:==== ====Key points:====
   * [[#Encrypt USB drives before storing data on them|Encrypt USB drives before storing data on them]]   * [[#Encrypt USB drives before storing data on them|Encrypt USB drives before storing data on them]]
 +  * [[#If you want to transfer files to someone else, use a file transfer platform instead|If you want to transfer files to someone else, use a file transfer platform instead]]
   * [[#Don’t put your USB stick in someone else’s computer|Don’t put your USB stick in someone else’s computer]]   * [[#Don’t put your USB stick in someone else’s computer|Don’t put your USB stick in someone else’s computer]]
   *[[#Don't trust anyone else's USB sticks|Don't trust anyone else's USB sticks]]   *[[#Don't trust anyone else's USB sticks|Don't trust anyone else's USB sticks]]
Line 12: Line 13:
  
 That way, if you lose the drive, or it is stolen, the finder or thief cannot access the information on it. That way, if you lose the drive, or it is stolen, the finder or thief cannot access the information on it.
 +
 +====If you want to transfer files to someone else, use a file transfer platform instead ====
 +Use an alternative whenever you can, such as a [[email_alternatives#ways_of_sharing_large_or_sensitive_files|file transfer platform]].
  
 ====Don’t put your USB stick in someone else’s computer==== ====Don’t put your USB stick in someone else’s computer====
Line 18: Line 22:
 You have no idea what security might (or might not) be in place on the other computer, whether it is infected by a virus or dormant ransomware, and so on. You have no idea what security might (or might not) be in place on the other computer, whether it is infected by a virus or dormant ransomware, and so on.
  
-Use an alternative whenever you can, such as a [[email_alternatives#ways_of_sharing_large_or_sensitive_files|file transfer platform]]. +If you absolutely have to transfer something to someone else’s computer via USB (perhaps because the files are just too large to transfer via a file transfer platform in a convenient manner, or else you are in a situation with no Internet access):
- +
-If you absolutely have to transfer something to someone else’s computer via USB:+
  
   * wipe your memory stick first, using your computer’s disk formatting tools   * wipe your memory stick first, using your computer’s disk formatting tools
   * put on it only the file you need to transfer   * put on it only the file you need to transfer
   * transfer it to the other computer   * transfer it to the other computer
-  * use the other computer’s disk formatting utility to wipe the USB stick +  * if the file is sensitive, use the other computer’s disk formatting utility to do a secure wipe of the USB stick (so that, if you lose it before you can destroy it, it's harder to access the file which was on it 
-  * take the stick back and destroy it+  * take the stick back and destroy it physically: hit it with a hammer until you can see the memory chips on the circuit board, and then break those chips
  
 It’s not kind to the environment, but the price of small USB sticks makes them disposable. It’s not kind to the environment, but the price of small USB sticks makes them disposable.
Line 52: Line 54:
  
 Yes, it might suck to feel that you could be a good Samaritan and return someone’s vital information or backup of family photographs, but you have absolutely no idea as to what is on that memory stick, and there’s a chance, perhaps even a strong chance, that it might be an attack. Yes, it might suck to feel that you could be a good Samaritan and return someone’s vital information or backup of family photographs, but you have absolutely no idea as to what is on that memory stick, and there’s a chance, perhaps even a strong chance, that it might be an attack.
- 
usb_sticks.1566626973.txt.gz · Last modified: 2021/07/06 09:26 (external edit)