IBM Distributes Malware-Infected USB Sticks At Security Conference

Why would any computer automatically run programs on USB sticks? It just seems like a really obvious security hole for negligible benefit.

Previously submitted: <a href="http://news.ycombinator.com/item?id=1368134" rel="nofollow">http://news.ycombinator.com/item?id=1368134</a><p>Garnered no comments, but I thought it was interesting that it was submitted before and sank without trace.

Maybe IBM is just trying to prove that they're one of the few who actually understand irony?

CNET report (w/o Forbes paywall):<a href="http://news.cnet.com/8301-27080_3-20005673-245.html" rel="nofollow">http://news.cnet.com/8301-27080_3-20005673-245.html</a><p>Didn't the attendees realize that there would be a post-test at the conclusion the security conference? That's what the USB stick experience was. Can't wait to see what "grades" attendees received :/

And why do they ask from the recipients to mail them the USB sticks? Are they going to clean them and mail them back?