If you found a half empty cup of coffee laying on the ground would you drink from it?
If you found half a sandwich by the side of the road, would you eat it?
If you found a flash drive laying in the parking lot, would you insert it into a government or corporate computer?
http://gcn.com/articles/2011/06/30/d...s-network.aspx
Quote:
A recent penetration test by the Homeland Security Department highlighted a glaring weakness that keeps security professionals up at night. DHS staff deliberately dropped data disks and USB flash drives in federal agency and contractor parking lots. According to Idappcom, a network security firm, 60 percent of those planted data devices, which could easily hold malicious code, were inserted into company or agency computers.
And if the data device had an official logo, the ***8220;success rate***8221; for it being inserted into an organization***8217;s network rose to 90 percent.
***8220;There is no device known to mankind that prevents people from being idiots,***8221; said Ray Bryant, Idappcom***8217;s CEO.
|
Evidently all an FIS agent needs to do is supply him or her self with flash drives with malicious code and a sling shot and shoot flash drives into parking lots. 60% chance of success. We have invested in operations with a lot less chance of success for a lot more money.
WTF?