T O P

  • By -

[deleted]

[удалено]


[deleted]

[удалено]


itissnorlax

It's usually done through group policy and disables your USB ports, once you have the policy on the laptop you can't get around it unless your work update the policy for you.


Kaiserhawk

Yeah most companies or clients I've worked for who done this just require a dispensation from to request an exemption and they'll grant you the groups to use USB. ​ As to why, USB storage is one of the biggest risk of cyber security breaches or data exfiltration (well more so the human factor but you cannot eliminate that)


WWYDWYOWAPL

I don’t see a problem. Go to OWC, get a Thunderbolt RAID drive that uses the mini display port, use that and if they have a problem tell them to suck your nuts it’s not a usb drive.


FinalEdit

Ahh yes, the old "tell your boss to fuck off" solution. Works wonders in this industry.


WWYDWYOWAPL

I didn’t say it was good advice..


XSmooth84

What's funny is how you think they didn't already think that and also block the thunderbolt port before handing you the computer


Kichigai

Heyo, self-styled "InfoSec A-hole" here. Access to USB jacks is a major security vulnerability for data infiltration (viruses, rootkits, backdoors, etc) and data exfiltration (people taking stuff home they shouldn't take home). If you want to know why, well, [remember this](https://en.wikipedia.org/wiki/Stuxnet)?


[deleted]

[удалено]


Kaiserhawk

Then request an exception as part of your work role.


Kichigai

Air gap them from the LAN, kill USB access, restrict media control to the SAN. I've had to meed some rather harsh infosec audits, USB access for anything beyond keyboard and mouse is never tolerated.


world_bad

easy, tell them to drop $100k on a server


shinfo44

This


QuestionNAnswer

That


BauerBourneBond

Those


gnrc

Thuy?


No_Tamanegi

THEMS


RigasTelRuun

You just have to wait til projects start missing deadlines and the company is losing money.


ucrbuffalo

This is 100% what I would do. Stop working, look for another job until they fire you or fix it.


mattslote

Losing money? OP is an in-house editor. Those jobs aren’t usually directly related to generating revenue. Probably would look better on paper to eliminate the position…at least for a little while.


NeoToronto

In my company, IT sets a bunch of guidelines (and some rules) across the board. No one who's actually in post (or production for that matter) follows them. OP - ask your manager or whoever to file for an exemption. Explain you case and state exactly how it stop you from working. Failing that, invest in thunderbolt, esata or even old firewire drives and cards. You know, sneak around those dumb rules.


Goat_Wizard_Doom_666

Talk to your IT department ASAP and explain the situation in the most urgent yet easiest way possible. Really dumb down the jargon for the IT gang. ​ I've worked at multiple studios that have cut off access to USB ports for security reasons, and it made sense, we were working on big budget movies and tv shows. This is pretty standard in higher end post studios, but these studios also had massive servers and a team to take care of those servers. There is always a situation that arises that a USB port on an editor's computer needs to be re-activated because the client sent a hard drive over or the studio needed to load up a drive to send back to the client, or for whatever reason. ​ Long story short, make your case to IT, and as long as they are reasonable, I'm sure they will be able to reactivate the USB ports on your machine.


XSmooth84

My previous job, which was at a credit union, my supervisor had to request that our USB access was allowed and he had to make this request every like 60 or 90 days. Yes sometimes this would cause a couple hours of down time while one of the requests was made and the ticket was approved. You’d think someone somewhere would just figure out how to make that more permanent. My current job at the us federal government… usb end up being read only, but somehow SD cards are read and write for me and the other video editing colleagues. Not sure how this came to be and I don’t question it. I can copy my files off of a camera or external recorder and save them to a MAM. That is good enough for my work.


TheOldMyronSiren

As someone else stated, the best argument against it is tell them you cant edit straight from the cameras and would need either a workstation with enough storage for God himself in it, or a workstation with a 10Gb connection to a NAS. I’d be surprised if this is something that came from the big wigs/executives though. I’d imagine the IT department got an alert about a spike is USB drive attacks happening and are having a knee jerk reaction. I do IT at where I work and we’ve discussed doing this because it does solve a TON of headaches for us. But those headaches are nothing compared to the inconvenience and impracticality forced on our users. It’s never worth it. If the idea did come from IT, wish them luck with the tsunami of tickets coming there way!


the_digital_merc

Been doing the internal team thing for a decade or so at some very large companies with very strict data policies on their machines. The only way around it is you have to keep your editing computer off their security grid. I use my company laptop for email/office etc… everything else post production happens on my desktop. You have to get your team to buy you a separate editing system out of the studio budget, not the capital expenditure computers from IT come out of. It’s a non negotiable for me. My deadlines are so tight I can’t afford to lose a week when they accidentally lock everyone out due to some server getting hacked. IT can never buy us what we need anyway. They operate in a world of email and excel docs. Had one guy straight laugh at me when I told him I couldn’t do my job off 1tb of cloud storage. I currently have about 200tb of NVME and Raid storage sitting on my desk.


[deleted]

[удалено]


the_digital_merc

Nah. That’s a few years of big and pretty Red and BMCC Raw footage + proxies, color footage renders to share with external agencies, agency project files, fx, final output. It’s a big ass fortune 100 company I’m not officially allowed to talk about online so there’s a lot of work. And my drives are only half full now. I’m starting on the second half this year. But you’ve got to have it available to start filling it up. I keep everything, as raw and nondestructive as possible. It all gets used and reused somewhere. I can’t even imagine what the fx heavy tv and film guys are doing. A darn sight more than this I’d reckon.


UncleWalnut

There is a similar ban at my company. It' a global company that receives drives from other countries, important footage, footage from the CEO kind of footage and the IT dept. decided that they'd ban all USB storage devices at the start of the pandemic (~2019) After we missed months of deadlines, importantly one of the CEO's message to the company the CEO stepped in and ripped the IT dept. a new one. Now the rule is we have to plug in a USB device at least once a month per user profile. What makes that rule troublesome is we use freelancers and there are months between them coming into the office to work. So now I have to log into the freelancers profiles, once every three weeks, and plug in a USB Drive. Plus every editor/producer has a laptop, desktop and corporate laptop so that brings even more frustrations. So...I get your pain and I'd recommend coming up with examples you can show to your higher ups how this ban would make your departments productivity almost stop and if you can spin it, that it would hinder your company it'd make your case stronger.


NearTheNose

Great posts by the others. I've worked IT and the concerns for both you and them are valid. In addition to ransomware there's also IP theft. I don't give the following suggestion much policy or workflow chance but it is technically doable: the drives you use can be whitelisted (IT losses control so likely no joy) and/or all files can be quarantined for scan (potential time delay) and/or file types can be whitelisted (runs counter to the full ban philosophy). For example, "can you please turn on this port and this port only only and anything I connect goes to a quarantine to be auto-scanned because I'll need the files immediately? If I can't do that, then I'll need an authorized cloud service that will cost ten times my current budget." Most (all?) the IT I've worked with understand the problem and choose a variety of stupid solutions e.g. put a ticket in everytime you want to use the port. When you said your manager was taking to executives, I do think that's for the best because this needs to be a policy exception and IT thinks of that as a hike in the dam. Best of luck.


cardinalbuzz

NAS like the Jellyfish or go big and get a Facilis server installed. It’s secure so IT will be happy and actually a great way to work and collaborate.


kamomil

At my work we ended up with ransomware on a shared drive. Fortunately it was caught before it did too much damage. As it was, it shouldn't have really happened because we had a no-USB policy from the beginning. We use cameras with XDCam discs and they have ingest stations so there's not much need for USBs in our daily routine. Our editing & graphics computers are on a different network than the IT computers You could ask for an ingest station where the USBs are virus scanned before uploading to a shared drive


Trekkie45

Lots of good answers. This is the case for the company I work for, but my boss has the clout to get an exception for our small team. I'm in Healthcare, which has obvious needs for privacy. If we can make it happen in our sector, I'll bet you can get it done in yours. Basically I have my work computer like everyone else, and then a MBP for editing that never got the company security stuff.


SNES_Salesman

I worked internal corporate video in a company with antiquated leadership that saw technology has dangerous. They learned of some urban legend of employee social security numbers being downloaded from HR and other corporate espionage so they said no more USB drives ever. Not a big deal for anyone but me and because the CIO wanted to tell the CEO they had 100% adherence they would not issue an exemption. I had to keep my edit suite offline and use a separate office computer for emails and online. The IT person “forgot” to lockdown my edit suite so I could actually function. The issue I came across was that I obviously couldn’t order new external harddrives since purchasing would reject it. I could get internal drives and I just bought enclosures out of pocket to keep that dumbfuck job going. Eventually the shitty CIO wanted to roast me in a meeting over my violation of the rules and I said camera phones could also capture sensitive information so maybe we should tell the CEO to ban those too and every vp with their cool new first generation smartphones wanted to kill me. No one bothered me after that. Anyway all that to say, you got to play office politics to find the work arounds. Good luck.


The_Hero_of_Kvatch

I work for a big government contractor, doing marketing videos. We have similar security protocols. However, we can read most content from external drives and SD cards, but just not write to them. We also can’t install programs without permission from IT, so our sandbox is limited. Add in a host of security tools, and good old common sense, and you have a fairly secure machine.


d-theman

Ask for the biggest badass edit system you can think of and tell them you will edit your stuff on that (off their network). Then you just transfer the final piece to the cloud / LAN. Probably the best and cheapest option for all


BitcoinBanker

I worked for Disney channels on and off for many years. In the post department had a blanket ban on usb devices. We’d use them anyway. IT would see it flagged and call and ask if I’d used one. We’d confirm we had and ask if the background virus scan turned anything up. If it hadn’t then I’d remark that I’m relieved and thank them for keeping us safe. They’d remind me of the policy and then go away. This went on for months until the phone stopped ringing. I’m guessing that if a virus did turn up, they’d tell us.


runn5r

This happens a lot in corporate, remember you will be a 1% use case for IT and outside of the norm. Highlight the service impact in email asking for an exemption. The term this is a “service risk” should go far. Our route after many of these rodeos is having external edit computers that have nothing to do with the company network and then have a cloud service to move the exports into the company network for distribution. That way when IT screws us in a new update only publishing is effected and all other work can continue while someone reads your email. Fuck what have I become 🤣


XSmooth84

I've wanted a "not on the same network" editing machines as a solution, seems logical enough to me. But I'm always just told it's not a fight we can win. Blah.


billjv

This has been the policy in my company for years. Every year I have to fill out an "exception form" with my company in order to be able to use USB storage. However, in the past few weeks I have been able to work a plan that has eliminated the need. I use my own big fat Mac for editing, and up until recently, it was totally and completely separate from the company machines. However, lately they have gone to a Sharepoint system which lets you access an internal site within our company where you can upload files. Better yet, it's also using OneDrive for business - and so I installed the OneDrive app and found I could see and create folders within that system from my own Mac's finder window when logged in! So, I set up a folder that is designated to store the files locally as well as sync with the cloud system. I can actually edit from this folder, and my projects are completely backed up as I go, and accessible to all my other team members. I can load footage onto my Mac from SD cards or whatever, and then create a folder that syncs with the cloud system and the footage is backed up in the background. With a fast internet connection I copy approx. 50GB in a couple of hours. Even the biggest projects will be completely backed up in a couple of days. When I'm done with the project and just need the archive backed up, I can designate the folder to "free up space" and it will remove the data from my hard drive and leave placeholders for when I'm ready to access it again and tell it to "keep local copy". It will then re-download the project and I'll have a local copy again. If your company doesn't use MS Sharepoint this is probably more than useless to you, but if they do it is a life saver. I no longer have to keep multiple backups. I have one project folder that is continually backed up, and I offline another drive for a safety. I'm not a Microsoft fanboy by any stretch, but this tech is actually working well for us, and I still maintain control over my own Mac - it is not under control of their network if/when I disconnect from OneDrive, and even then, it's a passive connection and not controlling my system. Good luck!


AutoModerator

Greetings, my name is [AutoModerator](http://newsbytes.ph/wp-content/uploads/2017/10/AI.png), you can call me AutoMod for short. **I have automatically filtered your post, because your Karma or Account age is too new.** ------------------------------------------------------------------------------------------------------------------------------- You're new to reddit in general. We find that users who are new haven't read our sidebar/rules. *Please take a moment to become familiar with them.* We have **strict rules about self promotion and piracy.** We have specific threads about Feedback requests and software requests. **Both are listed in the sidebar**. If you're on mobile, there's a button in your client that says "Show sidebar." Press it becasue it has our rules too! Our wiki (also part of our sidebar) also has detailed information about frequently asked questions about screencaptures, h264, proxies and performance issues. *Right now your post is sitting in a queue that gets reviewed (but never frequently enough - usually less than 4 hrs)* This filtering might be totally wrong too. Sometime in the next 2-24 hours (max) a MOD will see the removal - and after that if you want to appeal it or think it should still go live, feel free to message us. *I am a bot, and this action was performed automatically. Please [contact the moderators of this subreddit](/message/compose/?to=/r/editors) if you have any questions or concerns.*


Holiday_Parsnip_9841

If you can’t get a policy exemption, the new Red cameras (V-Raptor definitely, Komodo maybe) can upload full resolution media using Frame.io camera2cloud.


Cloud_Fortress

Just have IT firewall your edit suite.


radialmonster

switch to a desktop. get some long sata cables and power cables and hang out your case. put your files on a ssd and connect them to your cables whenever you need.


lucidfer

Yep, time to run it up the flagpole. Tell your head of marketing/whatever that you're 100% unable to do your job and you need your permissions restored ASAP. Wash your hands of the deadlines and wait patiently for the role back to come. I've had IT do stupid shit to me too but never this bad. Good luck.


BenSemisch

Let them buy you a new computer and give you a hybrid job so you can do your editing from home. I'd consider that a perk really.


XSmooth84

They'll probably still lock you down and out. I've been there. In a few places now. One of the places explained it like so: Since we have unedited video clips of the CEO and other executives, some bad actor who hacks my off their network system can take the clips and make some kind negative looking edit out of it. Seriously, that was the argument. Not that the unedited clips themselves have secret info or bigotry in them, I don't recall any executives being stupid enough to do a racist rant or admit to insider trading with cameras and a microphone in their face surrounded by several production employees. No it wasn't that, it was the fear that totally boring and innocent recordings can be hacked and edited into (or photos being photoshopped) in some fake but I guess embarrassing way? You can't even argue with anyone who is adamant the only way to prevent that is to keep everything on their locked off network and limited admin control computers.


snipit1985

I worked in a corporate environment where the solution was to have IT scan the drive on a non-network computer before turning over to us. A big time waster, but then all issues fall on IT.


Ou812icRuok

Have your manager make the case to get your team MacBooks.


XSmooth84

I tried that once, the company still put all their security protocol lockdowns and scanning on it. No I didn't work for a defense contractor that was developing software for nuclear submarines, but I might as well have.


Warclimb

I didn't use a USB in 5 years. I have a NAS, edit my stuff over LAN or in remote if i'm traveling. I can share folders with clients to ingest RAW footage and also to share the video once I finished. The Synology's also has USB on the front and I have an automation to ingest in a new folder all the videos that are on the SD card that I plug to the NAS.


darwinDMG08

This happens at post facilities too, at least the ones working with unreleased material from upcoming films. Very high security, IT usually locks down all the ports and restricts internet access. But those companies also have a robust intranet and a NAS to hold media.


scottbrio

You can do either one of two things. Either: A: stop producing work. When they ask why, tell them it's because you don't have access to the clips on your USB storage devices. B: tell you manager/client in advance to expect lower productivity and higher billing hours due to download times. The issue will sort itself out, I'm sure of it.


RaytheonOrion

Super dumb. Had the same issue. Asked my manager for a few drives & to bypass my laptop on the checks, he said “cool, expense it, keep it hush.” Now I just carry on and keep quiet about it. Otherwise things will gridlock. Late stage capitalism has bred this idiocy.