44

This question notes that a person briefly connected an Android device to an Apple computer via USB, and one comment indicates that it would "quite possibly" be a risk:

In theory, yes, in practice, probably not. If it had been a Firewire device, quite possibly. – Matthew

Why is Firewire a bigger threat than USB? How can connecting a Firewire device to a machine be a security risk?

I am a PC user and don't know anything about Firewire.

  • This question is rather silly. In what case of a person having direct physical access to a machine would you expect security? Give me physical access to a server and there are a 100 ways to break in, most of them not taking much tech knowledge. – blankip Jun 10 '16 at 19:48
  • 30
    It's not a silly question -- why would I think that plugging my laptop into someone else's thunderbolt display could give them any privileged access to my computer? It's not like I handed it over to them and they took it into a back room to open it up and gain access, and I'm not running any software they gave me -- the laptop never left my hands, I'm just using a monitor. – Johnny Jun 10 '16 at 20:07
  • 2
    @LittleCode so, you should buy all your equipment (including keyboards, screens, printers...), unpack it from the sealed boxes, transport it wherever you go, and keep it under biometric padlocks when you aren't there? Unless you are holding military grade secret information in a room full of enemy spies, most physical actions are still safe, and it is good to know which ones may not be. – Davidmh Jun 11 '16 at 13:45
  • 1
    @LittleCode but it's such an inconspicuous situation: hey Little, my phone's nearly empty, mind if I recharge it from your computer? Joe Average wouldn't let a stranger do this, but he would not suspect a security risk from a person he knows. – Torben Gundtofte-Bruun Jun 11 '16 at 19:13
  • 2
    @LittleCode: While your personal and private security measures seem to be formidable, that does not render moot the question the OP brought up. There are plenty of people out there who have no clue whatsoever about USB or Firewire vulnerabilities. Asking a question on how/why these are dangerous is exactly what this Stack is for, and it seems this is also a topic which many people here are interested in. – fgysin Jun 28 '16 at 15:10
61

Firewire and also Thunderbolt provide direct access to the OS memory, thus bypassing the operating system. See Wikipedia: DMA attack for more details on the possible attacks.

USB does not provide this kind of direct access. But it has other problems like the ability to unexpectedly emulate devices like a keyboard, see BadUSB.

  • 5
    Craziness. Who thought that was a good idea ;) – Desthro Jun 10 '16 at 15:26
  • 17
    @Cubic: The FireWire thing is also a natural consequence of how FireWire works: It's built to be fast. Capital F Fast. Which it is. The same with Thunderbolt. And at the point where someone can connect a compromised device to your computer, you've already lost; because they have physical access either to your computer or your device, which is a total loss. – Williham Totland Jun 10 '16 at 16:38
  • 3
    The direct memory access is all the more frightening when you consider that Firewire has a peer-to-peer architecture, in contrast to USB, in which a host controls the devices. – 200_success Jun 10 '16 at 17:16
  • 6
    @WillihamTotland - unfortunately, Joe Average user may have an infected/corrupted device, not know it, and plug it into his personal machine, thus infecting his own machine. It's not necessarily that a bad guy has gotten access to the machine and is plugging in his bad guy device. – FreeMan Jun 10 '16 at 17:51
  • 2
    @WillihamTotland: Interestingly, the original PC with its original keyboard connector could be taken over by a device plugged into the keyboard connector even before it performed its horribly slow RAM test. – supercat Jun 10 '16 at 17:59

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.