Lure of a FREE PEN DRIVE : MALWARE'd

1.   If you are one of those guys who are regular to attend workshops, seminars, product launches , lectures...you must have got varying opportunities of getting hold of freebies in form of bags,brochures and PEN DRIVES....yess m sure the last one is a pure lure and most of the times everi one of us falls for it...be it a small capacity or a large capacity...the hand does not think twice before picking it up....but does any one of us realise that it may be these pen drives who become the first source of uploading some malware or a virus in your PC or laptop...the moment it is plugged in .....the machine is compromised.....unless the autorun is disabled...which in most of the cases is not.....

2.  The concept of zero day exploits has made it more dangerous....coz even if the user decides to run a antivirus scan...it will be shown free of any kind of virus or malware...the result is a silent compromise of the machine...however updated it remains in respect of OS or browsers or any application....the silent action in the background defies every lock of the user.Now all this is not based on some kind of imagination...there have been real life cases of which the one which made lots of noise is the IBM-AusCERT conference on the Gold Coast, Queensland, in which the free pendrives were infected by not one, but two pieces of malware.The details available at this link http://nakedsecurity.sophos.com/2010/05/21/ibm-distributes-usb-malware-cocktail-auscert-security-conference/

(CLICK ON THE IMAGE TO ENLARGE)

3.   In what must have been a highly embarrassing admission, IBM Australia sent an email to all AusCERT attendees warning them of the security screw-up...as shown in the screen shot above...besides this the famous stuxnet example was via pendrives lure....so if this is happening at such high levels of interactions,can the workshops u and me attend be left behind!!!!no way....so whats the way out?....best way is to buy one from a genuine store...(not sure how clean will that be?)...or still better refrain your self from picking one free pendrive.

IRON KEY : World's Most Secure Pen Drives

1.         Pen drives are dangerous and have even been banned by few organizations including the prestigious armed forces after one scandal of security leak came to light few years back in navy.Is that the solution? Now it is like marta kya na karta wali baat….”i don’t have control over it so better ban it”.Good News for those who still desire to use pendrives in a much much safer way then available in the market.IRON KEYS have come to take care of the security issue of pendrives.What is IRON KEY? Read on…….. 

2.         The IronKey drives are very small, very portable, and very convenient. They come in configurations of 1Gb, 2Gb, 4Gb, and 8 Gb’s. IronKey’s Secure Flash Drive is similar to an iPod, as its hardware, software and online service all rolled into one product. The IronKey Cryptochip uses US government-approved AES, CBC-mode, 128-bit encryption at the hardware level. 

3.         All models come in a sleek, stainless-steel, waterproof case that is sturdier and heavier than other USB drives. The case has been injected with an epoxy compound that blankets the inner workings and keeps them dry and shock-resistant. Security-wise, the case would be extremely difficult to pry open without destroying what's inside. 

4.         IronKey has a password generator that can create passwords up to 99 characters in length at either normal strength with alphanumeric characters or stronger strength, which includes all keyboard characters. To use the IronKey flash drive, you need to activate an online account. This is a necessary step to enable certain services -- such as online password backup, device and software updates and to access IronKey's encrypted Web-surfing service, which uses Mozilla's Firefox. Besides creating an online username and password, you are asked to supply answers to three supplemental authentication questions that will verify your identity in case you ever lose your username or password. Failing to answer the questions accurately will lock you out of your account permanently. 

5.         IronKey e-mails an activation code that you must enter in a window to complete your online setup. IronKey allows you to change personal security information at any time by accessing account settings. If someone does happen to gain access to your flash drive and they fail to type in the correct password more than 10 times, IronKey will self-destruct, permanently locking out users and wiping out all the data on the drive. 

6.         From a speed standpoint, IronKey is fast. Hd Tach tests showed speeds well above the competition: IronKey's speed is 31MB/sec. burst speed; an average read rate of 29.6MB/sec., and a 6-millisecond random access rate. The CPU utilization rate is vastly higher than any other driver on the market by as much as 22%. SLC memory lasts about 100,000 write cycles and MLC memory lasts about 10,000 writes. 

7.         Special Solutions USA is an exclusive distributor of IronKey Secure USB flash drives for the Indian market. 

8.         More on https://www.ironkey.com/