Storage drives connected by USB devices known otherwise as flash drive, USB stick, USB key and thumb drive. Also includes larger storage devices such as portable hard drives.

learn more… | top users | synonyms

-4
votes
2answers
58 views

Safe to connect a USB to Linux?

A "friend" offerred me a USB with files. I plugged it into my Ubuntu (version 12 or 14, don't remember) PC and an error appeared (don't remember exactly what was written..). So I wasn't able to browse ...
3
votes
4answers
547 views

Can malware bridge external storage HW power-off switches?

Right now I have a backup setup which involves a 3.5" external USB-HDD with a seperate power-supply (as is usual for such drives). This HDD is internally a standard SATA HDD with USB+Power wrappers. ...
0
votes
7answers
79 views

What is the difference, from a security perspective, between a USB Hard Drive and Flash Drive?

Many corporate and government IT departments prohibit the use of USB Flash Drives (thumb drives, the little ones with no spinning disk inside), but allow and even endorse the use of USB Hard Drives ...
9
votes
6answers
16k views

How do I securely erase USB flash drives?

I would like to know if there is a way to securely erase USB flash drives without a chance to recover data from it once it has been erased. I know, that programms like DBAN can be used to securely ...
13
votes
4answers
4k views

Can I block viruses from a USB stick by scanning it before opening its folder?

I inserted my USB stick into a friend's PC which was full of viruses, malwares and adwares. Therefore I suppose they attacked my USB device as well. Now I want to use my USB device on my PC without ...
3
votes
3answers
408 views

Can a USB device read data from the internal HD of a PC when it's turned off?

I have heard on TV (tg5) that some devices exist, that can be connected to a USB port on a PC that is turned off and get data from the hard disk. I am wondering if (and if so how) this is possible; ...
2
votes
3answers
826 views

Is there such thing as a password enforced write protected flash drive?

We would like to provide a flash drive to a client, that they can boot to, which includes a read-only operating system of our own customization, probably Linux. Every boot, it starts from clean slate. ...
4
votes
3answers
129k views

How to detect if files were saved or copied to a USB drive?

How can I find out if files from my computer were written/copied/moved to a USB storage device? I want to know if there is a solution that would work in a system that has not got any ...
1
vote
2answers
4k views

Encrypted code file (.vbs) hides all my files and shows .lnk files

I am using Windows XP Professional and what happens is that when I try to connect any gadget like a pen drive or a mobile through USB, all my data gets hidden and it shows a 1 kb file which is a .lnk ...
4
votes
3answers
86 views

Is it dangerous to share a USB flashdrive? [duplicate]

Recently I've watched a movie "Blackhat" where just by inserting a USB flashdrive he could infect a host PC with some malicious program. Is it true that it's not safe to share USB flashdrives just ...
7
votes
5answers
162 views

Script / method to erase USB flash drive content after a certain number of uses

I have a few bootable thumb drives with various OS's that I intend to let someone use. However, I need a way to ensure the USB drives can only be used once. Thus my question - is there a way to have a ...
-1
votes
3answers
61 views

Design centralized logs collection through USB flash drives using hardware-based security for host computers

I have to centralize logs collection from many different widespread computers on which I can only plug USB flash drives. Those computers should not be reachable from the network in any case to prevent ...
0
votes
1answer
66 views

How to remove Write-Only on 'encrypted USB' from Laptop [closed]

My laptop has been policy enforced to write only on Encrypted USBs like Kingston DataTraveler 4000. Other USBs are read-only and not writable. Are there any tweaks to have this removed. I read one ...
45
votes
3answers
5k views

Can USB drive infect my PC with malware if I don't allow any autorun.inf to run?

Assuming that I'm using a trusted USB flash drive (meaning that it's not some device that looks like a USB drive and whose purpose is to damage my PC), is it possible for my PC to get infected from ...
0
votes
2answers
154 views

Removing malware from a USB drive

Let's suppose I plugged in my UBS flash drive in my friends' PC and it got infected with malware. Is there a way I can wipe the USB drive without connecting it my or some other computer (and infecting ...
3
votes
1answer
55 views

Least riskiest option when it comes to reinstalling the OS

I understand security is a continuum rather than a binary, which is why I'm asking this question. I need to reinstall the OS on my Macbook. However, after a security mishap, I’m far more alert about ...
3
votes
1answer
225 views

How safe is the encryption offered by Mac OS X's Finder?

If you plug in a USB drive, open it in Finder and right-click the Finder window, you get the option to encrypt the drive. What methods does Finder use to encrypt the drive and how safe is it ...
3
votes
1answer
886 views

USB OTG DMA Attack vector, any information about that?

In that paper: http://www.delaat.net/rp/2011-2012/p14/report.pdf[1] is reported that USB OTG can be used to have direct DMA memory access and as a consequence have access to all the content of the ...
3
votes
4answers
102 views

Thumbdrive and its obsolescence?

Using USB drives in the corporate environment is always the topic of security because viruses and malware can be introduced maliciously or unintentionally. For corporate environment, I am thinking to ...
131
votes
5answers
16k views

How can USB sticks be dangerous?

We all know the story of the USB drive left outside a power plant which was found by a worker and inserted into a computer to see the contents which then allowed a hack to ensue. Here is my question, ...
99
votes
11answers
14k views

Is there any way to safely examine the contents of a USB memory stick?

Suppose I found a USB memory stick lying around, and wanted to examine its contents in an attempt to locate its rightful owner. Considering that USB sticks might actually be something altogether more ...
4
votes
1answer
141 views

How to see what happens when a usb is inserted

After reading through this question about the dangers of untrusted usb drives, I was wondering if there was a way to actually see what happens when a usb drive is installed. Is it possible to say run ...
3
votes
2answers
304 views

Tiny USB sticks

To store my Bitcoin safely, I have an offline transaction setup. Computer A is online with a copy of the blockchain, and computer B is offline with the private keys. To make a transaction, I craft it ...
9
votes
2answers
2k views

How can I reprogram a usb as a keyboard

One of my recent posts has lead me to find that you can reprogram a usb drive to appear as a keyboard to a computer. I would like to know how to do this I am currently on a power google trying to find ...
8
votes
5answers
1k views

Is disabling auto-run enough to protect against malicious code from removable media automatically infecting a machine?

If I block auto-run on a windows machine, is this enough to protect it from malicious code (assuming I don't run any files manually)? Or are there known vulnerabilities that may cause infection?
2
votes
1answer
85 views

How safe are USB internet keys compared to using a router/hub with a built-in firewall?

Is it safe to use a USB 4G/LTE Mobile Internet Key, vs. a 4G/LTE Hub? How does it compare using an USB internet key to being behind a router/hub that has a firewall? I want to be shielded from the ...
1
vote
1answer
277 views

I have a virus in my USB drive. I haven't inserted it on my PC yet. How should I proceed?

I plugged the USB drive on a public computer at my university and all the files became .exe Is there a way to clean it without risking that it will copy the virus as soon as I insert the thing?
2
votes
2answers
320 views

Can a BIOS or UEFI infection transfer to other storage drives without the OS presence?

I am already aware that a BIOS or UEFI malware "activate" only in the OS environment. Is it possible though that a spread mechanism be activated without the presence of the OS, so that it would infect ...
0
votes
1answer
111 views

Detect and remove USB malware [duplicate]

I bought a USB thumb drive on ebay. It seems like much too good of a deal ($20 for a 512GB drive, as of 2015-08-10) which makes me suspicious about malware on the drive. How can I test it to see if it ...
1
vote
2answers
759 views

Booting into Live USB Linux

If I have a Live USB Linux stick and I plug it into a computer which is not connected to the internet and boot the computer using the Live USB stick. How secure is this interms of not leaving any ...
31
votes
6answers
20k views

How reliable is a write protection switch on a USB flash drive?

I'm currently using a USB flash drive with a live distribution. At times I would plug it into terminals I cannot trust. My threat model here is solely the risk of unauthorized modifications to the ...
1
vote
1answer
746 views

Has anyone used this ICLOAK USB device? [closed]

Does anyone know about this ICLOAK USB device? Opinions or how well they work? I'm looking for a security solution when I'm using PCs where I work. Occasionally we have to log into to web sites, ...
1
vote
1answer
475 views

Can I tell if my USB flash drive has been plugged into other computers? [closed]

Can I tell if my USB flash drive has been plugged into other devices?
13
votes
5answers
4k views

Detecting malware-infected USB drives

I'm about to distribute some relatively cheap promotional usb drives to some of my company's clients. I'm fairly confident the company I purchased them from wouldn't intentionally implant malware on ...
10
votes
4answers
4k views

How to prevent network administrators from accessing USB drive

How can I prevent network administrators from accessing, mapping to etc. a USB drive that's in a PC on their network? I'm mainly concerned about files being edited or deleted.
-5
votes
3answers
848 views

Can a VPN connection established by running a VPN client from an arbitrary location increase security?

I came across this interesting device called SurfEasy Private Browser. Here's the company's webpage and here's the product page on Amazon.com. I assume it's just a USB stick with a VPN client and ...
1
vote
1answer
133 views

How secure is my information on a bootable USB drive?

Suppose I have a live bootable USB drive with Linux installed on it. It is encrypted. I am booting off it on another computer with default OS Windows. How much separation is there between the host ...
15
votes
2answers
5k views

BitLocker Drive Encryption NOT secure from drive mapping on network

I have a USB drive encrypted with BitLocker Drive Encryption. Each time I insert the drive in my USB port it works as expected, requires me to enter the password. Maybe I have the BitLocker Drive ...
1
vote
1answer
87 views

How to protect against portable applications

There are many portable apps around that could be downloaded and run on local PCs. Usually running of exe could be blocked by using UAC. however, in this case of portable applications, how do I ...
1
vote
1answer
3k views

Encrypting tails USB boot disk (preeboot password on live)

To use tails, I have always used a DVD, because of the fact I know it will not be tampered with, at least within reason. However there are endless reasons why a USB boot option would be faster, and in ...
1
vote
0answers
236 views

Additional options to protect from bad USB devices in ubuntu

In addiition to the solution options in the other threads How to prevent BadUSB attacks on linux desktop Protecting against bad USB in ubuntu i wanted to ask if it is possible in ubuntu somehow to ...
3
votes
1answer
511 views

Which manufacturers who make BadUSB possible on their drives?

So as we all know by know BadUSB is possible on Phison 2251-03 chips. But are there any more reflashable devices in the wild that could be dangerous? And if there are is the firmware easily changed or ...
6
votes
7answers
2k views

Safe to connect to external drive?

A customer provided an external drive (USB 2.0 and Firewire 800 connections), and wants me to copy files onto the drive. The drive is not new. I have no particular reason to suspect the customer ...
50
votes
3answers
21k views

Is it enough to only wipe a flash drive once?

According to the documentation for the "diskscrb" command for wiping conventional hard drives: http://www.forensics-intl.com/diskscrb.html "Conforms to and exceeds the Government Standard set ...
0
votes
1answer
60 views

Securing Diskless Clients from Data Leakage

I am experimenting with securing diskless clients booting both RHEL 6.5 and Windows 7 via PXE (and iPXE in the future) from iSCSI targets. These computers run only on an internal network and are ...
0
votes
1answer
294 views

Securing live Ubuntu USB drive

Live Ubuntu USB drives are used for the purposes of secure transactions e.g. banking, payments,etc in the absence of live CDs since the devices do not include CD or DVD-ROMs. Since there are regular ...
0
votes
1answer
896 views

How to identify which storage USB device is BadUSB-free at store?

Are there certain things I can look for when buying a new external hard drive or flash drives to ensure that the one I purchase does not contain BadUSB? Would popular commercial brands, such as ...
2
votes
2answers
926 views

ByPass usb GPO with iphone -and probably other mobile-

So I am running pentest on a device running Win7 and admin user set group policy to disable all mass storage devices and all usb's. I have access to local user without privs. Although my usb stick ...
0
votes
1answer
397 views

Floppy disk partition showed up when USB Flash drive inserted

For one of my course's midterm lab portion, the professor provided us flash drives to put our project in. Everyone had their named labeled on one, so she gave me the last one left out, which had a ...
3
votes
6answers
20k views

Hardware USB Key to Reset Any Windows Password

This tool requires physical access of course, and there are many things you can do once you have physical access, but this peaked my curiosity. The tool in question: ...