Re: Disable USB for mass storage ...
The elegant solution in 'nix, but anyone with root access can chg your settings too... Just like anyone on windaz can mod the registry. You can define all these controls in policy, but organised crime, hackers and those w enough balls to act to defend freedom in our not so free now (and worse to be soon) society, can still circumvent.
There is no such thing as a secure system. Private data has to be managed as private data, else it will become public. The real problem here is more about what data governments want to keep secret:
Apart from their citizen's personal information, what data should they even be allowed to keep secret and for how long- if they are doing the right thing? As they tell us they are...
The problem here is two fold; the amount of seriously bad stuff governments are doing and the amount of data theyre classifying as secret. They store most of it as secret as no one tells them not to (and they're proven to be no better at managing their data bloat than the average MOP (member of the public)... Being able to keep it secret removes a lot of the onus on them to do the right thing.
Wholesale Data Surveillance like PRISM, corporates sharing Customer activity and assigning Universal unique IDs to everyone, ISPs like Telstra storing customer usage details and comprimising their customer's private data- all of this combined with constant surveillance makes the problem exponentially worse.
Turning the Net into the world's primary surveillance system is totally unsustainable of course. But they don't care. And how will it end for us? So why accept it now? Why allow them to keep shooting the messengers and turn so many people against us when we should be using this time of prosperity and opportunity to bring Nations and people together?
Until we expect more from those who govern (and tell them so) all this will combine with population and resource challenges to end in cataclysmic permawar. Our spooks don't want this, but they don't see it either.