From time-to-time it would be useful to connect an untrusted USB device to my computer. If I could connect it directly to a virtual machine, bypassing the host. that would be secure enough for me. I realise that's not zero risk, but it would be good enough.
However, with VirtualBox, there's no obvious way to do that. If a device is connected to the host, you can reconnect it to the VM. But by that point it's too late - a USB keyboard could have entered malicious keystrokes, or a USB CD could have autorun malware.
Is there a way to connect directly to a VM? I'm happy with an answer that uses any virtualisation software.