CertiGuide to Security+  9  Chapter 3:  Infrastructure Security (Domain 3.0; 20%)       9  3.2  Media            9  3.2.4  Removable Media

3.2.4.4  Diskettes 1 2 3 3.2.4.6  Smartcards

Security Issues with Flashcards

The different physical formats of flashcards are not compatible with each other, so you must be certain when you purchase one, that the type you’re buying is supported by your device.

All of these types of cards (except the Memory Stick) usually require an inexpensive adapter when they’re used in a computer (whether it’s a PCMCIA adapter, or a USB or serial reader device), so when transferring data, make sure that you have an appropriate adapter that can be used to read the card, on the destination computer.

Due to their very small size, flashcards are vulnerable to theft. Depending on the type of media, a gigabyte of data, or more, may be stored on a small device about the size of a large postage stamp or small key chain. Additionally, the USB version of these devices may be attached to any computer’s USB port, and provide a way to pull data off that computer and remove the data from the site, even if that PC has been carefully locked down by removing floppy drive and CD-R capability.

Flashcards are most often used in combination with electronic devices such as digital cameras and MP3 player/recorders, which do not support reading or writing encrypted files. Because of this, you should be aware that data exchanged with these devices via flashcard will be stored unencrypted, and is thus available for access by anyone who obtains the card. If you are using a flash card as storage for a Palm or Pocket PC, there are numerous programs that will encrypt data, so that loss of the device or card does not necessarily mean that the data on it is accessible by unauthorized personnel.

Along the same lines, some people have begun to use flashcards (and their cousins, solid-state USB “storage units) as portable storage media, copying data off one computer and then onto another. If you’re copying a file off a Windows 2000 system, and that file is encrypted using Windows 2000’s built-in encryption, be aware that when you copy it to the flashcard, whose file system does not support encryption, the portable copy of the file will not be encrypted.

Flashcards tend to allow a more limited number of write/read cycles before failure, than hard disks and RAM. If you plan to use flash memory for frequent data transfer, it’s a good idea to estimate the useful life of the media, and make sure that you have spare cards on hand toward the end of its anticipated life so that operations are not interrupted due to bad media.

For more information about flash memory cards, see the Flash Memory Card Primer³¹⁶

3.2.4.4  Diskettes 1 2 3 3.2.4.6  Smartcards