Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Protect my work flash drive


  • Please log in to reply
10 replies to this topic

#1 cfourkays

cfourkays

  • Members
  • 29 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Jensen Beach FL
  • Local time:12:17 AM

Posted 27 September 2016 - 08:00 AM

I'm a small IT guy with mostly home and small office clients.

I use 2 flash drives that have my work programs.

One has d7II on it, https://www.foolishit.com/d7ii/,  the other GEGEEK, http://www.gegeek.com/

 

Both contain a number of forensic programs on them, notably Nirsoft

 

There are times when I FORGET to disable any AV on the clients PC and it wipes out some of the programs before I catch it.

 

How can I protect those drives until I'm ready to open the data.

 

Pete


[URL=http://petespcworks.com/petehand.gif]

BC AdBot (Login to Remove)

 


#2 JohnC_21

JohnC_21

  • Members
  • 24,295 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:12:17 AM

Posted 27 September 2016 - 09:21 AM

You can make the USB drive read only. I don't know if this would affect any of the programs on the flash drive. There is also this utility. The flash drive would need to be formatted NTFS in order to have file permissions.

 

http://www.addictivetips.com/windows-tips/protect-files-on-your-usb-from-accidental-deletion-modification/

 

In any case, thanks for the GEGEEK link.


Edited by JohnC_21, 27 September 2016 - 09:23 AM.


#3 Didier Stevens

Didier Stevens

  • BC Advisor
  • 2,706 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:06:17 AM

Posted 27 September 2016 - 12:25 PM

Use an SD card and a SD-to-USB adapter, and toggle the write-protection tab on the SD card.

 

https://blog.didierstevens.com/2009/12/20/quickpost-read-only-usb-stick/


Didier Stevens
http://blog.DidierStevens.com
http://DidierStevensLabs.com

SANS ISC Senior Handler
Microsoft MVP 2011-2016 Consumer Security, Windows Insider MVP 2016-2019
MVP_Horizontal_BlueOnly.png

 

If you send me messages, per Bleeping Computer's Forum policy, I will not engage in a conversation, but try to answer your question in the relevant forum post. If you don't want this, don't send me messages.

 

Stevens' law: "As an online security discussion grows longer, the probability of a reference to BadUSB approaches 1.0"


#4 RolandJS

RolandJS

  • Members
  • 4,533 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Austin TX metro area
  • Local time:11:17 PM

Posted 27 September 2016 - 12:36 PM

You might want to carry a backup set of those two.  One never knows if an interruption in the reading and/or writing will occur.  Duplicating USB to USB -- I'm still looking for an EZ-to-use USB-USB copier.


Edited by RolandJS, 27 September 2016 - 12:37 PM.

"Take care of thy backups and thy restores shall take care of thee."  -- Ben Franklin revisited.

http://collegecafe.fr.yuku.com/forums/45/Computer-Technologies/

Backup, backup, backup! -- Lady Fitzgerald (w7forums)

Clone or Image often! Backup... -- RockE (WSL)


#5 JohnC_21

JohnC_21

  • Members
  • 24,295 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:12:17 AM

Posted 27 September 2016 - 12:48 PM

Use an SD card and a SD-to-USB adapter, and toggle the write-protection tab on the SD card.

 

https://blog.didierstevens.com/2009/12/20/quickpost-read-only-usb-stick/

This is a great tip. 



#6 RolandJS

RolandJS

  • Members
  • 4,533 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Austin TX metro area
  • Local time:11:17 PM

Posted 27 September 2016 - 01:33 PM

 

Use an SD card and a SD-to-USB adapter, and toggle the write-protection tab on the SD card.

 

https://blog.didierstevens.com/2009/12/20/quickpost-read-only-usb-stick/

This is a great tip. 

Where do we buy those devices?


"Take care of thy backups and thy restores shall take care of thee."  -- Ben Franklin revisited.

http://collegecafe.fr.yuku.com/forums/45/Computer-Technologies/

Backup, backup, backup! -- Lady Fitzgerald (w7forums)

Clone or Image often! Backup... -- RockE (WSL)


#7 Crazy Cat

Crazy Cat

  • Members
  • 808 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Lunatic Asylum
  • Local time:04:17 PM

Posted 28 September 2016 - 07:49 PM

SD-to-USB adapter.
R_IMG_3721_GU_large.jpgotg_grande.jpeg

Burn programs to CD, or DVD, and use USB 2.0 DVD/CD-ROM External - Disk Drive - DVD-ROM. https://www.amazon.com/Targus-Slimline-USB-CD-ROM-External/dp/B000H3BVE4
 

Two things are infinite: the universe and human stupidity; and I'm not sure about the universe. ― Albert Einstein ― Insanity is doing the same thing, over and over again, but expecting different results.

 

InternetDefenseLeague-footer-badge.png


#8 SafetySteve

SafetySteve

  • Members
  • 49 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Northern California.
  • Local time:08:17 PM

Posted 15 October 2016 - 04:14 PM

I hate the thought that you are plugging standard USB drives into multiple computers owned by multiple people.  Sounds like unsafe computing practices to me.  Since this is a family friendly forum I will bite my tongue about the analogy that comes to mind.  

 

If you are going to do this professionally, please consider buying USB drives that are protected against Bad USB and firmware infections; and that have true device level write protection.  The above recommendations all appear to require that the host offer the protection to the device.  These devices have come down in price and in my limited testing seem to work as advertised.



#9 RolandJS

RolandJS

  • Members
  • 4,533 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Austin TX metro area
  • Local time:11:17 PM

Posted 16 October 2016 - 07:03 AM

SafetySteve, I think IT person's booting his specially-made USB sticks, he will almost always bypass client's OS and 3rd party programs; I'm going to remember your write-protect comment -- thanks for the reminder!  :)


"Take care of thy backups and thy restores shall take care of thee."  -- Ben Franklin revisited.

http://collegecafe.fr.yuku.com/forums/45/Computer-Technologies/

Backup, backup, backup! -- Lady Fitzgerald (w7forums)

Clone or Image often! Backup... -- RockE (WSL)


#10 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 51,596 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:12:17 AM

Posted 17 October 2016 - 07:29 AM

USB Protection Tools:

DriveSecurity powered by ESET is a portable antivirus utility that prevents malware from spreading to portable media used outside of a protected environment. Used on any Windows computer (no installation required), it runs in the background and scans files with ESETs award winning antivirus engine to ensure that malware is not written to the portable device...DriveSecurity is available as a free 30-day trial...

DriveSecurity powered by ESET
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#11 Crazy Cat

Crazy Cat

  • Members
  • 808 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Lunatic Asylum
  • Local time:04:17 PM

Posted 18 October 2016 - 06:17 PM

Burning programs to CD, or DVD, and using a USB 2.0 DVD/CD-ROM External is the most secure way.
 

Two things are infinite: the universe and human stupidity; and I'm not sure about the universe. ― Albert Einstein ― Insanity is doing the same thing, over and over again, but expecting different results.

 

InternetDefenseLeague-footer-badge.png





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users