Hacker News Reader

I work at a bank and I know our security is higher than most, but I'd be shocked if usb drives are allowed in the Google offices.

View on HN

At Arm IME they weren't banned, just training on not picking up from car park etc. - I'd expect the same of Google, at BAE Systems I physically couldn't access the USB (or any) ports on my desktop computer, but that doesn't really work when you're given a Macbook and able to work from home and coffee shop etc.

You can block USB mass storage devices through OS policies, it doesn't prevent everything though (people have demoed frying computers using capacitors, or using USB keyboards to open the terminal and execute code)

>but that doesn't really work when you're given a Macbook and able to work from home and coffee shop etc.

MDM like jamf and/or EDR/Antivirus like SentinelOne and Carbon Black can disable USB ports/anything in software. If your account is not admin/root you cannot remove them also.

True, I just think it's more likely Google IT provides external hard drives for extra capacity on request than that they block it. (At least for most roles, ones it's not also air-gapping!) I may well be wrong, no insider knowledge, just my outsider impression of the company.

They have yubikeys, so unless they only use nfc it is likely. Also, chromebooks and usb-c.

Reply on news.ycombinator.com