Storage drives connected by USB devices known otherwise as flash drive, USB stick, USB key and thumb drive. Also includes larger storage devices such as portable hard drives.

learn more… | top users | synonyms

3
votes
3answers
855 views

Are there known hacks or security problems on broadband USB dongles?

USB broadband dongles seem to be common everywhere now though I'm not sure what the most widely accepted name for them is. In case I'm using poor terminology I'm referring to USB sticks which contain ...
3
votes
4answers
100 views

Thumbdrive and its obsolescence?

Using USB drives in the corporate environment is always the topic of security because viruses and malware can be introduced maliciously or unintentionally. For corporate environment, I am thinking to ...
3
votes
2answers
300 views

Tiny USB sticks

To store my Bitcoin safely, I have an offline transaction setup. Computer A is online with a copy of the blockchain, and computer B is offline with the private keys. To make a transaction, I craft it ...
3
votes
1answer
848 views

USB OTG DMA Attack vector, any information about that?

In that paper: http://www.delaat.net/rp/2011-2012/p14/report.pdf[1] is reported that USB OTG can be used to have direct DMA memory access and as a consequence have access to all the content of the ...
3
votes
2answers
842 views

How to make a certificate encrypted flash drive?

I was wondering if it possible to encrypt a flash drive (or any other external medium) using certificates instead of a password. The idea is to have a number of encrypted pendrives that can be used on ...
3
votes
1answer
478 views

Which manufacturers who make BadUSB possible on their drives?

So as we all know by know BadUSB is possible on Phison 2251-03 chips. But are there any more reflashable devices in the wild that could be dangerous? And if there are is the firmware easily changed or ...
3
votes
2answers
201 views

Adding photos to Truecrypted, airgapped laptop from camera safely

I have a Truecrypted, airgapped (no internet connectivity at all) laptop that I use as a completely secure computer for sensitive files. I want to add images from my iPhone (I know), camera or other ...
3
votes
3answers
402 views

Simple methods of preventing infection from external drives

What are some simple methods of preventing my computer from being infected by USB drives and other storage devices? I'm not asking for any bullet-proof methods, just something that can prevent ...
3
votes
1answer
194 views

How safe is the encryption offered by Mac OS X's Finder?

If you plug in a USB drive, open it in Finder and right-click the Finder window, you get the option to encrypt the drive. What methods does Finder use to encrypt the drive and how safe is it ...
3
votes
3answers
3k views

Is there a chance USB files once opened by TV, PC etc. have any footprint, backup or residue files left on the hosting device it worked on?

Let me first thank you all for the great info. you are providing. My question is; Do files stored on USB once opened and viewed by TV, PC etc. have any footprint, backup or residue files left on the ...
3
votes
0answers
2k views

What is a self-contained cross-platform encryption for USB drive? [closed]

I'm trying to find self-contained encryption solution for USB drives while at the same time being platform independent. For example, Windows' BitLocker only works on Windows and not on OS X or Linux. ...
3
votes
1answer
54 views

Least riskiest option when it comes to reinstalling the OS

I understand security is a continuum rather than a binary, which is why I'm asking this question. I need to reinstall the OS on my Macbook. However, after a security mishap, I’m far more alert about ...
2
votes
5answers
789 views

How to restrict flash drives in Local Area Network

It is prohibited to use USB drives at our office, due to security reasons. But some people still use them to steal information. It is now a great risk factor at our office. Now we need to ensure any ...
2
votes
2answers
942 views

How can I identify which computers a USB drive has been used on?

Is there a way to find out in which and/or how many computers a USB flash disk entered. And if its possible can we find out how many times a file was read/edited. I heard that its possible , but I ...
2
votes
2answers
423 views

Physically Blocking All PC Ports?

I've got a laptop that is currently 'Air Gapped' that I want to further secure by locking down the USB ports and NIC. I've disabled the NIC from the BIOS, removed the WiFi and bluetooth modules. But I ...
2
votes
2answers
301 views

Can a BIOS or UEFI infection transfer to other storage drives without the OS presence?

I am already aware that a BIOS or UEFI malware "activate" only in the OS environment. Is it possible though that a spread mechanism be activated without the presence of the OS, so that it would infect ...
2
votes
2answers
894 views

ByPass usb GPO with iphone -and probably other mobile-

So I am running pentest on a device running Win7 and admin user set group policy to disable all mass storage devices and all usb's. I have access to local user without privs. Although my usb stick ...
2
votes
1answer
88 views

Is the following environment contained?

I would like to make sure that my working environment is contained (prevent data leaks meaning I don't want temp file or traces from files I have worked on). I am about to create a usb key with the ...
2
votes
3answers
813 views

Is there such thing as a password enforced write protected flash drive?

We would like to provide a flash drive to a client, that they can boot to, which includes a read-only operating system of our own customization, probably Linux. Every boot, it starts from clean slate. ...
2
votes
1answer
83 views

How safe are USB internet keys compared to using a router/hub with a built-in firewall?

Is it safe to use a USB 4G/LTE Mobile Internet Key, vs. a 4G/LTE Hub? How does it compare using an USB internet key to being behind a router/hub that has a firewall? I want to be shielded from the ...
2
votes
1answer
825 views

Encryption key token

How to securely store an encryption key in USB drive? Here is my idea. I would like to write a program (let's say PC) and it will store data to a database encrypted at the record level or field level, ...
2
votes
1answer
216 views

How to safey interface with compromised USB device?

I'd like to safely analyze and test a T-Mobile UMG366 USB cellular modem. Clearly I'd like to know about this specific device, but more generally I've no idea how to deal with a complex USB dongle ...
1
vote
3answers
298 views

Create live USB that hides IP address from foreign government

I may have to visit family in a few months overseas. Unfortunately, the local government of the area my family is from has gotten more corrupt and vicious. I am compelled to go here and may need to ...
1
vote
3answers
325 views

What is the safest way to copy a file from an untrusted system?

Scenario: There are two computers running GNU/Linux, U and T. U is untrusted and T is trusted. A non-executable file F (which may however have been infected with malware) resides on U. (For ...
1
vote
3answers
392 views

Is the aggregate severity rating of “Important” for MS13-027 too low?

The Security Bulletin states that the "Maximum Security Impact" is "Elevation of Privilege"; however, the SRD blog post says code execution is possible. Additionally, SRD says "Other software that ...
1
vote
2answers
2k views

Portable KeePass and TrueCrypt

I ran some advice on the nets: Don't reuse your passwords. Make sure all the passwords you use are different. Use a password manager. An example is "Keepass". Set the master password to something ...
1
vote
1answer
271 views

I have a virus in my USB drive. I haven't inserted it on my PC yet. How should I proceed?

I plugged the USB drive on a public computer at my university and all the files became .exe Is there a way to clean it without risking that it will copy the virus as soon as I insert the thing?
1
vote
2answers
236 views

Can BadUsb only be delivered via USB?

BadUsb works by infecting a computer when plugged into the USB port. Is it also possible for an attacker who gains control of a system, such as remote access, to then infect any connected USB ...
1
vote
2answers
4k views

Encrypted code file (.vbs) hides all my files and shows .lnk files

I am using Windows XP Professional and what happens is that when I try to connect any gadget like a pen drive or a mobile through USB, all my data gets hidden and it shows a 1 kb file which is a .lnk ...
1
vote
1answer
459 views

Can I tell if my USB flash drive has been plugged into other computers? [closed]

Can I tell if my USB flash drive has been plugged into other devices?
1
vote
2answers
712 views

Using EncFS on a USB drive

I am using EncFS with a USB drive. How secure is this if my USB drive gets stolen? I ask because the .encfs6.xml file is saved in the USB drive and I can open it with a normal text editor. Do I ...
1
vote
1answer
449 views

While copying data from any email client to a USB device what residue information is left on the PC?

I often end up using netcafe's for browsing web (Windows 7). I recently wanted to download some secure data from my gmail account on to the USB pen drive. So, I went ahead and opened the attachment ...
1
vote
1answer
920 views

File system history on USB drives

I want to find out who deleted a specific file from a USB disk. The disk is formatted as NTFS. The file was deleted while the disk was plugged into a Windows 7 system. However, while I do have ...
1
vote
1answer
86 views

How to protect against portable applications

There are many portable apps around that could be downloaded and run on local PCs. Usually running of exe could be blocked by using UAC. however, in this case of portable applications, how do I ...
1
vote
1answer
100 views

Is there a value in using portable programs on a USB key?

If I am working writing a text document in a text editor (say notepad or MS word, or ...) then I can save the file and the encrypt this file. I can then try to erase the original file by overwriting ...
1
vote
2answers
1k views

How do i know if I have moved or copied a file from my SD card to PC? [closed]

is there any way to know if the file I have on my mini-SD card was moved or copied to my PC? i have sensitive files on my SD card which is stolen and i cant remember if I cut or copied the file from ...
1
vote
1answer
734 views

Has anyone used this ICLOAK USB device? [closed]

Does anyone know about this ICLOAK USB device? Opinions or how well they work? I'm looking for a security solution when I'm using PCs where I work. Occasionally we have to log into to web sites, ...
1
vote
1answer
3k views

Encrypting tails USB boot disk (preeboot password on live)

To use tails, I have always used a DVD, because of the fact I know it will not be tampered with, at least within reason. However there are endless reasons why a USB boot option would be faster, and in ...
1
vote
1answer
746 views

Is placing an `autorun.inf` folder in a drive's root a good safety precaution?

Is it possible for viruses to use Windows' autorun.inf mechanism to start their execution? If so, is placing an autorun.inf folder a good safety precaution? My reasoning is that it can help in one fo ...
1
vote
2answers
753 views

Booting into Live USB Linux

If I have a Live USB Linux stick and I plug it into a computer which is not connected to the internet and boot the computer using the Live USB stick. How secure is this interms of not leaving any ...
1
vote
0answers
235 views

Additional options to protect from bad USB devices in ubuntu

In addiition to the solution options in the other threads How to prevent BadUSB attacks on linux desktop Protecting against bad USB in ubuntu i wanted to ask if it is possible in ubuntu somehow to ...
1
vote
0answers
994 views

External hard drives: 'date last accessed' file?

I'm trying to figure out if there's a way to figure out when files on my external hard drive were last opened. I'm using a Seagate Backup Plus, and it's both mac and PC compatible. BUT, I've also read ...
1
vote
4answers
769 views

How to verify full USB drive's digital signature

There are various ways to verify the validity of a file, usually checking the MD5 checksum or OpenPGP signature. Is it possible to do the same for a full USB Drive? I'd like to be able send a USB ...
1
vote
1answer
128 views

How secure is my information on a bootable USB drive?

Suppose I have a live bootable USB drive with Linux installed on it. It is encrypted. I am booting off it on another computer with default OS Windows. How much separation is there between the host ...
0
votes
1answer
1k views

Ways to protect source code from theft [duplicate]

I just want to know better ways to protect source code from theft on Windows by Removable Devices like CD,Pendrive. Here is what I know: Windows Disk Encryption: Pretty nice to protect from offline ...
0
votes
2answers
4k views

Infected usb flash drive detection and cleaning

Want to know what all type of malware infections are their that hides themselves in a pendrive completly and infects machine silently.How to detect this type of malware as they cannot be seen. How to ...
0
votes
1answer
65 views

How to remove Write-Only on 'encrypted USB' from Laptop [closed]

My laptop has been policy enforced to write only on Encrypted USBs like Kingston DataTraveler 4000. Other USBs are read-only and not writable. Are there any tweaks to have this removed. I read one ...
0
votes
2answers
149 views

Removing malware from a USB drive

Let's suppose I plugged in my UBS flash drive in my friends' PC and it got infected with malware. Is there a way I can wipe the USB drive without connecting it my or some other computer (and infecting ...
0
votes
1answer
865 views

How to identify which storage USB device is BadUSB-free at store?

Are there certain things I can look for when buying a new external hard drive or flash drives to ensure that the one I purchase does not contain BadUSB? Would popular commercial brands, such as ...
0
votes
1answer
473 views

Malware hidden on a USB drive, does the malware always need to run to hide itself? [duplicate]

Would malware be able to hide itself in the controller somehow or otherwise be able to effectively hide files itself from both windows and Linux?