Dive Brief:
-
The USB-C standard was created to unify and simplify computing cable needs, but it's still has lackluster performance, according to Android Authority. The universal cable lacks a "defining principle" that gives users a clear understanding of what it is compatible with, like charging, for example.
-
But the remodeled USB connector needs to be "specifically designed" to support faster charging or "non-USB protocols" including DisplayPort, MHL, HDMI, Ethernet and audio, according to Android Authority. So while a USB-C is capable of running numerous features, the ports they are designed for do not necessarily promise full functionality on the device.
- USB-C are present on many laptops, but other "mainstream displays" and devices have yet to undergo the change. This means that USB-C has moved only "some components out of the laptop" and onto the end the cable, according to Android Authority. Meanwhile, Apple is reportedly considering the adoption of USB-C for iPhones in 2019 after already installing USB-C support on MacBooks, reports DigiTimes.
Dive Insight:
Despite the ports on devices looking identical, all USB-C do not provide the same functions, making the technology unnecessarily frustrating for enterprise IT units and consumers.
Companies take USB-C into consideration for the sake of PC purchases, which could impact the entire IT infrastructure because it's replacing older USB connectors. In addition to the headache of restructuring an infrastructure to accommodate a new standard of USB, IT units must consider the "living off the land" method of attacks, according to Gartner.
Gartner defines living off the land as the exploitation of common IT products, which include USBs. If a single connector is used across different devices and different manufacturers, bad actors have an easier time launching an attack or breach.
Researchers recommend using security features already designed into operating systems to better streamline endpoint protection platform (EPP). USB device control is one of those features.
However, security features outside of traditional EPPs are becoming overlooked in favor of a "suite solution," according to Gartner. But ignoring the embedded detection features of something like USB device control puts all of an organization's security investments solely into protection.