[Web4lib] Disable USB drives on public computers

[Andrew Mutch]

"[S]ince the PC is set back to it's original state at reboot. Isn't that
prevention?"

In my view, depending on how your computer is configured, it's not
prevention. I know that some libraries that use Deepfreeze treat
Deepfreeze as the extent of the security necessary. But without additional
security, that can allow your computer to be hacked, compromised by
viruses and otherwise be a source of problems for your network and
patrons. Sure, rebooting the computer resets everything back to normal.
But what about the patron who uses the computer after the previous patron
had downloaded a virus or installed malicious software? It's a good tool
but definitely not the end-all for security.

Andrew Mutch
Library Systems Technician
Waterford Township Public Library
Waterford, MI

> I should have been more specific. Yes, I know what Deepfreeze does. The
> two other things that need to be done?
>
> 1. Set your bios correctly (so USB isn't bootable)
> 2. Make sure your network is locked down to the outside world
>
> And in essense, Deepfreeze DOES prevent the user from making PERMANENT
> changes, since the PC is set back to it's original state at reboot.
> Isn't that prevention?
>
> David
>
> -----Original Message-----
> From: web4lib-bounces at webjunction.org
> [mailto:web4lib-bounces at webjunction.org] On Behalf Of Elizabeth Harman
> Sent: Monday, May 01, 2006 11:10 AM
> To: web4lib at webjunction.org
> Subject: Re: [Web4lib] Disable USB drives on public computers
>
> Deepfreeze won't stop me from hacking into your computer by rebooting
> into my OS in my USB drive. It will just not save changes, usless I have
> hacked it so well I have removed Deepfreeze.
>
> Deepfreeze is designed to put the computer back to your
> original/preferred state at reboot. Not prevent the user from making
> changes.
>
> Liz Harman
> Internet Specialist
> Jefferson-Madison Regional Library
>
> David King wrote:
>> That's what Deepfreeze is for.
>>
>> David
>>
>> -----Original Message-----
>> From: web4lib-bounces at webjunction.org
>> [mailto:web4lib-bounces at webjunction.org] On Behalf Of Drew, Bill
>> Sent: Friday, April 28, 2006 2:26 PM
>> To: Thomas Dowling; web4lib at webjunction.org
>> Subject: RE: [Web4lib] Disable USB drives on public computers
>>
>> Or I might want to reboot your computer from my USB drive with my own
>> operating system so I could hack into your computer.
>>
>> Wilfred (Bill) Drew
>> E-mail: mailto:drewwe at morrisville.edu
>> AOL Instant Messenger:BillDrew4
>> "They that can give up essential liberty to obtain a little temporary
>> safety deserve neither liberty nor safety." (Benjamin Franklin)
>
> _______________________________________________
> Web4lib mailing list
> Web4lib at webjunction.org
> http://lists.webjunction.org/web4lib/
>
>
> _______________________________________________
> Web4lib mailing list
> Web4lib at webjunction.org
> http://lists.webjunction.org/web4lib/
>