Social Engineering strikes again

I can’t say that I haven’t participated in something like this before, because I have. Social Engineering is still the easiest way to get into a system.

In this case, users found random USB tokens and plugged them into their computers. I’ve seen the same thing happen with CDs, DVDs, and floppies. It’s the same “hack”, different media.

The problem administrators have is that the more security they pile on (ie. disabling all USB ports), the more inconvenienced users are, and the more they complain that they can’t get their job done.