Storage drives connected by USB devices known otherwise as flash drive, USB stick, USB key and thumb drive. Also includes larger storage devices such as portable hard drives.

learn more… | top users | synonyms

133
votes
5answers
16k views

How can USB sticks be dangerous?

We all know the story of the USB drive left outside a power plant which was found by a worker and inserted into a computer to see the contents which then allowed a hack to ensue. Here is my question, ...
101
votes
11answers
14k views

Is there any way to safely examine the contents of a USB memory stick?

Suppose I found a USB memory stick lying around, and wanted to examine its contents in an attempt to locate its rightful owner. Considering that USB sticks might actually be something altogether more ...
52
votes
3answers
22k views

Is it enough to only wipe a flash drive once?

According to the documentation for the "diskscrb" command for wiping conventional hard drives: http://www.forensics-intl.com/diskscrb.html "Conforms to and exceeds the Government Standard set ...
45
votes
3answers
5k views

Can USB drive infect my PC with malware if I don't allow any autorun.inf to run?

Assuming that I'm using a trusted USB flash drive (meaning that it's not some device that looks like a USB drive and whose purpose is to damage my PC), is it possible for my PC to get infected from ...
32
votes
6answers
20k views

How reliable is a write protection switch on a USB flash drive?

I'm currently using a USB flash drive with a live distribution. At times I would plug it into terminals I cannot trust. My threat model here is solely the risk of unauthorized modifications to the ...
16
votes
2answers
5k views

BitLocker Drive Encryption NOT secure from drive mapping on network

I have a USB drive encrypted with BitLocker Drive Encryption. Each time I insert the drive in my USB port it works as expected, requires me to enter the password. Maybe I have the BitLocker Drive ...
13
votes
4answers
4k views

Can I block viruses from a USB stick by scanning it before opening its folder?

I inserted my USB stick into a friend's PC which was full of viruses, malwares and adwares. Therefore I suppose they attacked my USB device as well. Now I want to use my USB device on my PC without ...
13
votes
5answers
4k views

Detecting malware-infected USB drives

I'm about to distribute some relatively cheap promotional usb drives to some of my company's clients. I'm fairly confident the company I purchased them from wouldn't intentionally implant malware on ...
12
votes
3answers
3k views

Am I protected from USB autorun malware on Windows 7?

As far as I know, the autorun.inf problem (the possibility of automatically executing code when a USB stick is plugged in) was solved through Windows Updates for XP, and on 7 it is no longer possible ...
11
votes
3answers
1k views

Retrieve files from possibly infected USB

I work in a lab environment, and save data to a shared PC. This PC is not networked, and so the only way to get the data from that PC to my own, is through USB. The lab director has mentioned that the ...
10
votes
4answers
4k views

How to prevent network administrators from accessing USB drive

How can I prevent network administrators from accessing, mapping to etc. a USB drive that's in a PC on their network? I'm mainly concerned about files being edited or deleted.
10
votes
5answers
731 views

Using a weak password on a truecrypt volume

I have put together a portable apps USB stick for when I need to use random site computers, I also threw truecrypt on with an encrypted volume for some word documents. The password I am using is ...
10
votes
5answers
1k views

Can the BadUSB exploit be prevented?

Recently I read a few things about the BadUSB exploit, for example: http://arstechnica.com/security/2014/07/this-thumbdrive-hacks-computers-badusb-exploit-makes-devices-turn-evil/ My understanding ...
9
votes
5answers
3k views

Browsing on a USB OS (Linux) safe from malware?

Let's say I have a computer. It's a personal computer - the one you'd typically find in homes. In this scenario, it's running Windows XP SP3, although it could run 7, Vista, etc. I have a USB drive ...
9
votes
2answers
3k views

How can I reprogram a usb as a keyboard

One of my recent posts has lead me to find that you can reprogram a usb drive to appear as a keyboard to a computer. I would like to know how to do this I am currently on a power google trying to find ...
9
votes
6answers
17k views

How do I securely erase USB flash drives?

I would like to know if there is a way to securely erase USB flash drives without a chance to recover data from it once it has been erased. I know, that programms like DBAN can be used to securely ...
8
votes
5answers
1k views

Is disabling auto-run enough to protect against malicious code from removable media automatically infecting a machine?

If I block auto-run on a windows machine, is this enough to protect it from malicious code (assuming I don't run any files manually)? Or are there known vulnerabilities that may cause infection?
8
votes
6answers
2k views

Using linux to combat windows flash drive malware?

I just put an old flash drive which i used with a windows machine into my linux. I noticed many files, mostly exes which were never visible in windows (my windows does not hide hidden files and ...
8
votes
3answers
2k views

SSD (Flash Memory) security when data is encrypted in place

I'm surveying current techniques on flash memory security. I've learned that the non-in-place update of flash memories prevent us from adapting the same encryption techniques that we used on hard ...
8
votes
1answer
335 views

Cons of disabling live CD in bios

It has been suggested that for security reasons it's a good idea to change the boot order to prevent booting from a live CD or USB. But if you lose the passwords to unlock hard drive and bios, and you ...
8
votes
2answers
1k views

Recently had a virus, can I use backed up files on clean system?

I had to reinstall my OS (windows) recently due to a virus. I backed up my source files onto a flash drive. How can I get to those files without problems? I know flash drives can have nasty things in ...
8
votes
3answers
4k views

How to use a found USB key safely

I found a USB drive while riding the subway and I want to read it to see if I can return it back to it's owner. If I can't find any info on the stick, I'll use it for my own means. Assuming I have a ...
7
votes
3answers
6k views

Changing policy to allow USB drives. Why should I try to stop it?

We are currently in the process of allowing USB memory sticks, but with a stricter policy. Some key points in the policy is: Any confidential data stored on the USB drive has to be encrypted Always ...
7
votes
5answers
185 views

Script / method to erase USB flash drive content after a certain number of uses

I have a few bootable thumb drives with various OS's that I intend to let someone use. However, I need a way to ensure the USB drives can only be used once. Thus my question - is there a way to have a ...
7
votes
2answers
949 views

Mac OSX: What is the safest way to access an unknown USB storage?

Let's say a friend gives me a SD-card which I'm not sure is safe (i.e. it may contain malware), what is the safest way to access this card on a Mac OSX? E.g. Is it possible to create a sandbox in ...
6
votes
7answers
8k views

Physical computer security, how to disable USB ports when the computer is 'locked'?

Lets say my PC & server is in an environment where a theoretical attacker has physical access to the machine while I'm not there. Now the data is encrypted on the hard drive with TrueCrypt. ...
6
votes
6answers
805 views

How to protect data on a thumb drive

So I had a scare this past week (couldn't find my thumb drive) and figured I'd better put in some protection on my thumb drive. What is the best way to encrypt the data on the thumb drive? I am a ...
6
votes
3answers
1k views

Are USB thumb drives inherently more dangerous than other removable media? Why?

The general consensus I hear among security professionals is that USB drives are dangerous. In most organizations (that I have worked at), USB drives are either forbidden or employees are required to ...
6
votes
5answers
2k views

Is there any way to write-protect a USB or hide its contents from deletion without hardware modifications?

Data on external storage devices are not secure, I understand that. Despite hardware modifications they can still be hacked etc. However files can be hidden (steganography) or encrypted. I'm ...
6
votes
1answer
445 views

Can malicious code be contained outside the filesystem on a USB drive?

I've personally seen it recommended that every time a user inserts a USB thumb drive into a computer, that the thumb drive be scanned for potential malware and malicious code. However, if all that's ...
6
votes
7answers
3k views

Safe to connect to external drive?

A customer provided an external drive (USB 2.0 and Firewire 800 connections), and wants me to copy files onto the drive. The drive is not new. I have no particular reason to suspect the customer ...
6
votes
3answers
7k views

How to scan USB drive with clamav on Linux

Is there a way to scan the entire drive including auto-run and all partitions, including the master boot record (MBR)?
5
votes
3answers
983 views

Live Linux which does not mount any hard drive in the computer

I am searching for a Linux System which runs from a CD and does not mount any hard drive of the computer. I want to prevent any possiblity to write something on the hard drive of the computer and on ...
5
votes
2answers
2k views

Securing USB flash drive on linux

We have a industrial system(running on linux) with a USB port. We have the USB port only for copying certain data. Other than this we don't want the USB drive to contain any other executables or ...
5
votes
1answer
232 views

How safe are CD's for Air Gapped computers?

It is often suggested, for air-gapped PC's, to use CD/DVD's as a transfer medium between machines instead of USB sticks or portable hard-drives as it is difficult to write data to a CD/DVD without the ...
4
votes
3answers
2k views

Securing my USB flash drive with Truecrypt and FreeOTFE

I want to know if I encrypt my flash with Truecrypt "Encrypt a non-system partition/drive" option and then mount it and then make a container with FreeOTFE on the Truecrypt encrypted drive and then ...
4
votes
3answers
862 views

How to store passwords in a text file in USB securely?

I am planning on creating a text file to store my passwords, so I only need to remember 1 password (at the moment, I have about 20 long/complex passwords in my mind, and am worried that I might forget ...
4
votes
1answer
356 views

What role does a PC play when transferring from one attached usb-drive to another?

I recently attached two usb-sticks of colleagues to my laptop and transferred a file from one to the other. The file was sensitive and was not supposed to be copied to my PC. Never mind the ...
4
votes
5answers
518 views

Removable storage solution

Background: My organization has to find a removable storage solution. However, it is my understanding that the DOD is pretty strict about flash drives due to security considerations. Question: My ...
4
votes
3answers
137k views

How to detect if files were saved or copied to a USB drive?

How can I find out if files from my computer were written/copied/moved to a USB storage device? I want to know if there is a solution that would work in a system that has not got any monitoring/...
4
votes
3answers
90 views

Is it dangerous to share a USB flashdrive? [duplicate]

Recently I've watched a movie "Blackhat" where just by inserting a USB flashdrive he could infect a host PC with some malicious program. Is it true that it's not safe to share USB flashdrives just ...
4
votes
4answers
2k views

Cleaning pendrive without infecting

I'm using Ubuntu without ever (knowingly) having had any virus issues. Recently I put a usb pen in a computer in a print shop, and their Windows machine told me that it was infected. I would like to ...
4
votes
1answer
144 views

How to see what happens when a usb is inserted

After reading through this question about the dangers of untrusted usb drives, I was wondering if there was a way to actually see what happens when a usb drive is installed. Is it possible to say run ...
4
votes
5answers
5k views

Is it possible to restrict USB keys to only certified ones, and block that key's access on other computers

I am working on security for an organisation, we have purchased some encrypted USB keys but wanted to stop any employees leaking data. is there any way to stop their laptop accepting any key but the ...
4
votes
1answer
1k views

How do OTP USB sticks work?

I just discovered the YubiKey NEO which seems like a pretty awesome device for maintaining security for a variety of different things including computer login, SSH private keys, GPG private keys, and ...
4
votes
2answers
6k views

How to secure usb data storage of Android phones?

I just found out that if I connect my phone to a laptop with a cable, the password becomes completely USELESS. So how can I protect the data in my phone from a usb cable? It's actually very easy to ...
3
votes
6answers
21k views

Hardware USB Key to Reset Any Windows Password

This tool requires physical access of course, and there are many things you can do once you have physical access, but this peaked my curiosity. The tool in question: https://www.kickstarter.com/...
3
votes
4answers
554 views

Can malware bridge external storage HW power-off switches?

Right now I have a backup setup which involves a 3.5" external USB-HDD with a seperate power-supply (as is usual for such drives). This HDD is internally a standard SATA HDD with USB+Power wrappers. ...
3
votes
3answers
413 views

Can a USB device read data from the internal HD of a PC when it's turned off?

I have heard on TV (tg5) that some devices exist, that can be connected to a USB port on a PC that is turned off and get data from the hard disk. I am wondering if (and if so how) this is possible; ...
3
votes
3answers
641 views

How hard it would be to infect a system with malware through a portable web browser

If I use a portable web browser on a USB device like Google Chrome Portable how hard it would be to get infected by a malware/virus in the system to which the USB device is connected? Google Chrome ...