An IT security consultant has developed a program designed to scan corporate
networks for sensitive files and automatically transfer them to an
iPod.
The 'slurp.exe' application fits on a standard iPod and when activated
searches a network for relevant file formats, such as Word and Excel documents.
Consultants at Sharp
Ideas wrote the application as a proof of concept and posted it on the
corporate website. It has since been hobbled so that it cannot copy files, but
just counts how many are available.
"Using slurp.exe on my iPod it took me 65 seconds to copy all document files
(*.doc, *.xls, *.htm, *.url, *.xml, *.txt, etc.) off of my computer as a logged
in user," said the originator in an article on the topic on the corporate
website.
"Without a username and password I was able to use a boot CD Rom to bypass
the login password and copy the document files from my hard drive to my iPod in
about three minutes 15 seconds."
The company is recommending that iPods are banned from offices and that USB
connections to corporate PCs are terminated. Information should also be stored
on a central encrypted server rather than on individual PCs.
Do you agree?
Have your say on this article