Bruce Schneier on USB Sticks

In response to this story, “US Gov’t plant USB sticks in security study, two thirds take bait“:

The problem isn’t that people are idiots, that they should know that a USB stick found on the street is automatically bad and a USB stick given away at a trade show is automatically good. The problem is that the OS trusts random USB sticks. The problem is that the OS will automatically run a program that can install malware from a USB stick.