Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [usb]

an industry standard used for connecting to and powering peripheral devices (keyboards, mice, cameras, printers, external hard drives, etc) from a computer or other USB capable device.

0
votes
2answers
98 views

Bluetooth vs USB Mouse Security

I had a question regarding the use of Wireless mice and security. In general which method of using a wireless mouse is considered more secure, using a mouse with a USB dongle, or using a mouse that ...
0
votes
0answers
5 views

Is there any way to use my Titan security key via NFC on my laptop, instead of USB? [migrated]

My Google Titan security key has both USB and NFC interfaces, and I'm able to use it via NFC on my Android phone. However, my laptop also has an NFC reader, and it doesn't seem to work out of the box. ...
3
votes
1answer
136 views

Are there any known viruses/malware that can infect Ubuntu that come from the USB?

I know that most viruses that can infect the OS from having an infected USB inserted into the PC are mostly Windows only, but is there any possibility that there is one that can affect Ubuntu as well?
2
votes
1answer
153 views

How to mitigate the new malicious USB cable USBHarpoon (NOT BadUSB) threat in an enterprise? [duplicate]

In this case, the victims may think they are using a generic USB cable, but the PC will recognize the cable as a Human Interface Device, much like it would a mouse or keyboard, giving the attacker ...
0
votes
0answers
66 views

Need to make a USB device look like a keyboard

My company is implementing "BitLocker to Go" encryption to encrypt USB flash drives. However we us Barco USB wireless presentation devices. Each time one is plugged in, Bitlocker wants to encrypt it (...
1
vote
2answers
76 views

Can a wifi usb adapter double as a keylogger?

I've read that there are keylogger hardware and thought that usb wifi adapter are hardwares and wondered if they can be hacked to work as a keylogger. I'm just worried that my usb wifi adapter might ...
0
votes
0answers
9 views

Is it possible to only have to install programs once on kali linux persistent usb? [migrated]

I made a bootable encrypted USB with kali linux on it and with persistence. When I save a file and reboot then the file does not disappear but today I installed veracrypt and when I rebooted, it was ...
3
votes
2answers
119 views

Watching movie from a potentially infected device

I went on holiday with a friend. He filmed and made a movie from our trip. He put the movie on my usb key. I was about to plug this, but realised my friend does not have good security practices, so ...
46
votes
8answers
10k views

Force user to remove USB token

I'm looking at setting up secure laptops using BitLocker with pre-boot PIN and startup key. I'm wondering if there is a way to force the user, who is remote, to remove the USB with the startup key ...
8
votes
1answer
158 views

risk from USB-C port on locked laptop

If an attacker has access to the USB-C port on my laptop which is in powered on but at the lock screen, what is the risk that they are able to carry out an evil maid attack? Say I'm in the room but ...
0
votes
0answers
38 views

How to prevent threats from usb on Linux? [duplicate]

OS: archlinux I'm thinking of logging into a restricted user with mount permissions and examine behavior of the usb. But what if usb has injected hardware that would inject code directly when I ...
1
vote
1answer
140 views

USB Mouse in the meeting room

In our meeting rooms we have at our disposal the necessary material for presentations. HDMI, and mouse etc., lock down to the table (3 digit lock). All the mouse have been removed for security ...
1
vote
1answer
74 views

Persistent Bootable USB with Write Protection?

I am developing a series of extraction scripts (currently python 2.7) for a university project - these tools will be provided on a bootable USB for use by first responders when encountering a suspect ...
0
votes
1answer
40 views

What considerations are there for using USB WiFI adapters and how to protect against them?

Often with older machines, the built-in WiFi adapters have failed. These in turn drive a demand to procure USB WiFi adapters since ethernet connectivity is not a choice. Since the devices will be ...
1
vote
1answer
139 views

Detecting USB-based(Arduino Leonardo) attacks

Can a USB-based atack, e.g., BadUSB, RubberyDucky be detected by observing the output from dmesg? I bought a brand new DFRobot Beetle, which is essentialy a miniaturized Leonardo. A few seconds after ...
2
votes
1answer
108 views

Can a USB with an infected MBR or GPT harm an OS that reads it?

Assume a USB drive has an MBR or GPT that has malware in it. I already understand that booting from such a USB device would execute the malware as part of the bootloader. If I understand correctly, if ...
0
votes
2answers
116 views

Boot from live usb to avoid being spied on

Suppose the government wants to spy on you using government-designed malware. If you then want to visit sensitive pages on the internet, would it be more secure to use Tor browser within a USB - live ...
0
votes
0answers
17 views

How to securely initialize a private key from several parts

This explains a lot about how certificate authorities store their private keys. I read somewhere else that the key is broken down into as much as 20-something parts, and stitched together from those ...
3
votes
2answers
78 views

Malware spreading via installation media

Imagine user downloads and burns installation USB stick on their compromised Linux system. Are there any known malware that is capable of spreading via Linux distributions installation media so that ...
0
votes
1answer
249 views

How can I safely use potentially infected USB sticks from a previous OS installation?

So I recently upgraded an old MB Pro to Mojave because I was concerned I could've infected it. Now I'm probably overreacting to all of this but since I was using all of my USB sticks in the previous ...
1
vote
0answers
39 views

Is it possible that a usb drive manufactured 3 months ago can have data copied to it that shows the file last modified date before manufacturing date? [closed]

I have some data that needs to be handed to a friend. I don't want to give the original drive (drive-1), so I plan to purchase a drive (drive-copy) and copy data to it. The data copied will still show ...
3
votes
2answers
443 views

How we can prevent innocent looking USBNinja (USBHarpoon) attacks?

Is there anything we can do across the company to make sure USBNinja and other similar USB cables that looks so real for users can really be mitigated?
1
vote
1answer
98 views

How to prevent a virus from stealing data when I transfer files between offline and online computers?

Let's say I have one offline computer with some important data, and one online computer. Sometimes I need to move files from the offline computer to the online one. When I transfer those files, is ...
1
vote
1answer
41 views

Reading SD cards on a GPO blocked USB [closed]

Our company has a GPO which blocks USB mass storage devices. The GPO permits Media Transfer Protocol (MTP) connections. Some SD card-based camera devices don't support MTP so they are blocked as they ...
1
vote
2answers
807 views

Can infection effect a phone through it's wireless hotspot, also the usb tethering

If I made a wireless hotspot from my phone and had computers infected with malware connect and use my wireless connection of the phone can any malware from the pc get into the phone? If my phone was ...
0
votes
1answer
118 views

Which encrypted USB stick is the better option? [closed]

I am looking for a hardware encrypted USB stick to carry some important files such as my KeePassXC database, Key files, cryptocurrency wallets, certificates and other stuff with me. There are some ...
2
votes
3answers
187 views

Is it possible to check if a USB's firmware is unmodified when plugged in?

Let's say I have some USB stick that I know and trust. I can examine the firmware and generate a checksum for it. Can I use this checksem to ensure that when the USB is next plugged in the firmware ...
0
votes
1answer
70 views

Working from a USB [closed]

I have a Mac for my work laptop and I would like to work on my xCode project, I can't work on the laptop directly and save the file to computer due to fears that it could one day be recovered & be ...
2
votes
2answers
68 views

Is there a risk in rebooting a smartphone while it's connected to an unknown USB port?

I rebooted my phone while it was connected to the PC and saw a notification about a failed device installation. Looked up the text and the code, and it turns out my phone exposes a certain way to ...
3
votes
1answer
574 views

Is it possible to bypass USB access restriction placed by the Active Directory? [closed]

I've been tasked with an onsite engagement to see what I can find from one of their laptops. They have a policy in place to block USB access through the Active Directory, e.g. When you try to access ...
5
votes
1answer
309 views

Are PS/2 devices a risky piece of hardware for modern point of sale devices to be using?

This question is based off of a TempleOS question here on Super User. The gist is that PS/2 support seems to be disabled from many modern BIOS’es due to a possible security flaw in the protocol. ...
3
votes
2answers
129 views

If I format a USB stick, will the old contents be recoverable?

I have read that the "safest" way to make sensitive USB contents un-recoverable is to hammer to pieces the USB stick. Indeed, a quick search on Google shows up hundreds of ways to "recover usb files" ...
4
votes
3answers
1k views

How protect ourselves from USB Firmware viruses? Does Antivirus help?

On Windows (pnd probably other operating systems, I don't know), when you plug in a USB appliance (a flash drive, mouse, etc) Windows automatically runs the "Device installation" and the firmware is ...
1
vote
2answers
117 views

How to find if a USB has been plugged in on a certain date? (Linux/Mac)

Starting from this great script offered by Daniel Azuelos cd /Volumes/suspicious_USB /usr/bin/sudo find . -atime -21 -exec ls -dluT {} \; How is it possible to modify it in order to find if a USB ...
-2
votes
2answers
196 views

Creating portable bash terminal & cmd to USB [closed]

Developing my toolkit and I want to have a safe edition of cmd.exe and bash on a usb. Why? These can be tampered with by attackers and I want a version I know is safe from manipulation. Any ...
2
votes
1answer
401 views

How can a user defeat anti-live forensics software?

Let's say I have a computer with full disk encryption which is logged and running, but I suspect it has anti-forensics software (eg. usbkill), which means that I risk compromising the integrity of the ...
3
votes
1answer
404 views

TLS/SSL over USB using OpenSSL [closed]

I want to secure the communication of an embedded device that is connected to a host via USB. At the moment I'm considering using the openssl library. I can use it on the embedded device and on the ...
0
votes
0answers
117 views

Can you get a virus / malware just by plugging in a USB device? [duplicate]

I recently bought an electronic cigarette lighter which is charged via USB. I have no idea if the company that made it is trustworthy as it is one of those no-name brands. The thing that concerns me ...
5
votes
1answer
98 views

Does using an UPS mitigate power-analysis attacks on a keyboard?

Are there any papers that can document that using an online UPS (Uninterruptible Power Supply) can reliably protect against power-analysis attacks that attempt to read keystrokes on wired keyboards? ...
1
vote
1answer
99 views

Security considerations for USB keyboard/mouse switches

I am considering purchasing a basic USB keyboard/mouse switching box in order to allow me to use the same keyboard and mouse with two different physical machines. This is similar to a KVM (keyboard ...
4
votes
1answer
227 views

Can smart power meters read key presses on a wired keyboard?

Smart power meters are becoming quite prevalent. Question: Can a smart power meter (with patched firmware) read the keys pressed on a wired PS/2 or USB keyboard, connected to a desktop computer? What ...
2
votes
2answers
458 views

Can a program containing virus, used to flash USB firmware infect it despite formatting?

I was having problems with my Kingston 8GB USB drive (it kept saying "write protected"). I solved the problem by first using ChipGenius and then a program called "Restore v3.13.0.0". I downloaded from ...
4
votes
1answer
1k views

Is all the alarmism around BadUSB really called for with respect to host devices?

I can understand why there was such a furor about BadUSB and indeed it poses a rather earthshaking threat to the base assumptions of many in their cyber security threat models. Things which many of us ...
1
vote
1answer
234 views

USBlyzer - Safe Or Not?

I need to use a USB analyzer. I've been looking at a couple of different options. This one came up. As far as I can tell, it's not open source, but seems to be quite popular. Seeing that the data ...
6
votes
4answers
669 views

Possible to use *only* U2F authentication?

Using a U2F USB authentication key to login to services such as Google seems a good idea. However, these services often allow you to register a backup two-factor-authentication (2FA) method, which you ...
2
votes
1answer
291 views

Is USB type c vulnerable to BadUSB?

Consider the new SanDisk ultra dual type c flash drive. Would that be safer once computers start to come with type c ports?
0
votes
0answers
103 views

Re: Intel IME\physical-access exploits - Has a Manufacturer ever (unintentionally) released malware-infected PC Components?

Given the discovery that Intel's IME can be hacked by USB (since 2008), I started researching hardware level exploits - like the Stuxnet USB attack on Iran's Nuclear plant and I'm curious about the ...
0
votes
1answer
185 views

Have the recent Linux kernel USB vulnerabilities found by Andrey Konovalov been patched?

Have the Linux USB drivers been patched for the recent vulnerabilities that have been found by Andrey Konovalov (Google)? If not what can be done to protect against these attacks other than avoiding ...
3
votes
2answers
715 views

How to protect/mitigate IntelME (CSME) JTAG attack over USB?

Two security searchers from ptsecurity.com ( Maxim Goryachy‏ @h0t_max and Mark Ermolov @_markel___ ) have announced on Twitter: Game over! We (I and @_markel___ ) have obtained fully functional ...
1
vote
1answer
136 views

Analyzing possible encrypted USB stick

I was given an USB stick which was used to secure some data from a work computer. However - the USB stick seems broken now, or encrypted, which would mean the information might be lost. So, when ...