We have an Android device with 2 external USB host ports. Now I wonder what harm can be accomplished by an attacker with malicious intentions, provided that:
- The user can not access settings or any App that we do not control (I'd love an example of apps we would need to prevent access to)
- USB debugging is turned off
- Our device is rooted (just to mention)
Could you give me an example what harm an attacker could do, considering the above conditions?
As I understand it, if a USB is mounted, then for something to be dangerous, it has to be executed. However execution must come from "the inside", no? If we control the inside, then there shouldn't be a problem, right?