2

This question already has an answer here:

I give a USB flash drive to a friend. He returns it. I don't have a particular reason to suspect my friend of any wrongdoing, but I suspect his computer might be infected. I don't need to browse the flash drive - just make it safe to use again. My thinking is to disconnect all drives, boot DBAN from CD/DVD, insert the flash drive in question, wipe it and then it should be relatively safe to use again.

Any problems that I'm not seeing here?

Do I need to disconnect all drives if they are encrypted - i.e. if there is a payload on the USB drive where would it save itself if they disks are encrypted?

marked as duplicate by Tobi Nary, Steffen Ullrich, Anders, ISMSDEV, Xiong Chiamiov Nov 13 '17 at 21:56

This question has been asked before and already has an answer. If those answers do not fully address your question, please ask a new question.

  • 1
    DBAN will only wipe out the content area of the drive, not the firmware regions which are actually far more dangerous. – Ben Voigt Nov 13 '17 at 17:17
  • @BenVoigt its funny how your automatic comment has more upvotes than the required amount to close the question. – Mindwin Nov 13 '17 at 18:18
  • 1
    @Mindwin: It takes a lot less rep to upvote a comment than cast a close vote. – Ben Voigt Nov 13 '17 at 18:20
1

You need to use a USB Drive with some type of firmware control. It's the only way to ensure that the firmware present on the device is identical to the firmware on the device when the vendor created it.

You always need to be able to trust the vendor. Anyone can sell you a USB that has malware on it and you'll never know unless you examine the firmware manually.

Not the answer you're looking for? Browse other questions tagged or ask your own question.