Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [usb]

an industry standard used for connecting to and powering peripheral devices (keyboards, mice, cameras, printers, external hard drives, etc) from a computer or other USB capable device.

0
votes
0answers
17 views

Can a USB with an infected MBR or GPT harm an OS that reads it?

Assume a USB drive has an MBR or GPT that has malware in it. I already understand that booting from such a USB device would execute the malware as part of the bootloader. If I understand correctly, if ...
0
votes
2answers
93 views

Boot from live usb to avoid being spied on

Suppose the government wants to spy on you using government-designed malware. If you then want to visit sensitive pages on the internet, would it be more secure to use Tor browser within a USB - live ...
0
votes
0answers
15 views

How to securely initialize a private key from several parts

This explains a lot about how certificate authorities store their private keys. I read somewhere else that the key is broken down into as much as 20-something parts, and stitched together from those ...
0
votes
0answers
30 views

Is there any way to detect, whether a USB host actually loaded the driver for the USB device I connected?

Let's assume I have a device which is a blackbox for me. This could be an IoT device I'd like to examine in a pen test. Let's further assume the device has a USB port. One thing I'd like to know is: ...
3
votes
2answers
65 views

Malware spreading via installation media

Imagine user downloads and burns installation USB stick on their compromised Linux system. Are there any known malware that is capable of spreading via Linux distributions installation media so that ...
0
votes
1answer
56 views

How can I safely use potentially infected USB sticks from a previous OS installation?

So I recently upgraded an old MB Pro to Mojave because I was concerned I could've infected it. Now I'm probably overreacting to all of this but since I was using all of my USB sticks in the previous ...
1
vote
0answers
38 views

Is it possible that a usb drive manufactured 3 months ago can have data copied to it that shows the file last modified date before manufacturing date? [closed]

I have some data that needs to be handed to a friend. I don't want to give the original drive (drive-1), so I plan to purchase a drive (drive-copy) and copy data to it. The data copied will still show ...
1
vote
2answers
145 views

How we can prevent innocent looking USBNinja cable attacks in our organization?

Is there anything we can do across an organization to make sure USBNinja and other similar USB cables that looks so real for users can really be mitigated?
1
vote
1answer
80 views

How to prevent a virus from stealing data when I transfer files between offline and online computers?

Let's say I have one offline computer with some important data, and one online computer. Sometimes I need to move files from the offline computer to the online one. When I transfer those files, is ...
1
vote
1answer
31 views

Reading SD cards on a GPO blocked USB [closed]

Our company has a GPO which blocks USB mass storage devices. The GPO permits Media Transfer Protocol (MTP) connections. Some SD card-based camera devices don't support MTP so they are blocked as they ...
0
votes
0answers
46 views

How can you prevent flashing of malicious firmware for USB (or SATA) hard drives?

I am assuming no physical access. Some devices have signed firmware so this makes it a bit harder though not impossible. Is there anything an end user can do to make it harder for an attacker? Maybe ...
1
vote
2answers
420 views

Can infection effect a phone through it's wireless hotspot, also the usb tethering

If I made a wireless hotspot from my phone and had computers infected with malware connect and use my wireless connection of the phone can any malware from the pc get into the phone? If my phone was ...
0
votes
1answer
94 views

Which encrypted USB stick is the better option? [closed]

I am looking for a hardware encrypted USB stick to carry some important files such as my KeePassXC database, Key files, cryptocurrency wallets, certificates and other stuff with me. There are some ...
2
votes
3answers
168 views

Is it possible to check if a USB's firmware is unmodified when plugged in?

Let's say I have some USB stick that I know and trust. I can examine the firmware and generate a checksum for it. Can I use this checksem to ensure that when the USB is next plugged in the firmware ...
0
votes
1answer
70 views

Working from a USB [closed]

I have a Mac for my work laptop and I would like to work on my xCode project, I can't work on the laptop directly and save the file to computer due to fears that it could one day be recovered & be ...
2
votes
2answers
68 views

Is there a risk in rebooting a smartphone while it's connected to an unknown USB port?

I rebooted my phone while it was connected to the PC and saw a notification about a failed device installation. Looked up the text and the code, and it turns out my phone exposes a certain way to ...
3
votes
1answer
336 views

Is it possible to bypass USB access restriction placed by the Active Directory? [closed]

I've been tasked with an onsite engagement to see what I can find from one of their laptops. They have a policy in place to block USB access through the Active Directory, e.g. When you try to access ...
5
votes
1answer
289 views

Are PS/2 devices a risky piece of hardware for modern point of sale devices to be using?

This question is based off of a TempleOS question here on Super User. The gist is that PS/2 support seems to be disabled from many modern BIOS’es due to a possible security flaw in the protocol. ...
3
votes
2answers
123 views

If I format a USB stick, will the old contents be recoverable?

I have read that the "safest" way to make sensitive USB contents un-recoverable is to hammer to pieces the USB stick. Indeed, a quick search on Google shows up hundreds of ways to "recover usb files" ...
3
votes
3answers
684 views

How protect ourselves from USB Firmware viruses? Does Antivirus help?

On Windows (pnd probably other operating systems, I don't know), when you plug in a USB appliance (a flash drive, mouse, etc) Windows automatically runs the "Device installation" and the firmware is ...
1
vote
2answers
117 views

How to find if a USB has been plugged in on a certain date? (Linux/Mac)

Starting from this great script offered by Daniel Azuelos cd /Volumes/suspicious_USB /usr/bin/sudo find . -atime -21 -exec ls -dluT {} \; How is it possible to modify it in order to find if a USB ...
-2
votes
2answers
138 views

Creating portable bash terminal & cmd to USB [closed]

Developing my toolkit and I want to have a safe edition of cmd.exe and bash on a usb. Why? These can be tampered with by attackers and I want a version I know is safe from manipulation. Any ...
2
votes
1answer
357 views

How can a user defeat anti-live forensics software?

Let's say I have a computer with full disk encryption which is logged and running, but I suspect it has anti-forensics software (eg. usbkill), which means that I risk compromising the integrity of the ...
3
votes
1answer
270 views

TLS/SSL over USB using OpenSSL [closed]

I want to secure the communication of an embedded device that is connected to a host via USB. At the moment I'm considering using the openssl library. I can use it on the embedded device and on the ...
0
votes
0answers
62 views

Can you get a virus / malware just by plugging in a USB device? [duplicate]

I recently bought an electronic cigarette lighter which is charged via USB. I have no idea if the company that made it is trustworthy as it is one of those no-name brands. The thing that concerns me ...
5
votes
1answer
87 views

Does using an UPS mitigate power-analysis attacks on a keyboard?

Are there any papers that can document that using an online UPS (Uninterruptible Power Supply) can reliably protect against power-analysis attacks that attempt to read keystrokes on wired keyboards? ...
1
vote
1answer
78 views

Security considerations for USB keyboard/mouse switches

I am considering purchasing a basic USB keyboard/mouse switching box in order to allow me to use the same keyboard and mouse with two different physical machines. This is similar to a KVM (keyboard ...
4
votes
1answer
205 views

Can smart power meters read key presses on a wired keyboard?

Smart power meters are becoming quite prevalent. Question: Can a smart power meter (with patched firmware) read the keys pressed on a wired PS/2 or USB keyboard, connected to a desktop computer? What ...
2
votes
2answers
378 views

Can a program containing virus, used to flash USB firmware infect it despite formatting?

I was having problems with my Kingston 8GB USB drive (it kept saying "write protected"). I solved the problem by first using ChipGenius and then a program called "Restore v3.13.0.0". I downloaded from ...
3
votes
1answer
773 views

Is all the alarmism around BadUSB really called for with respect to host devices?

I can understand why there was such a furor about BadUSB and indeed it poses a rather earthshaking threat to the base assumptions of many in their cyber security threat models. Things which many of us ...
1
vote
1answer
178 views

USBlyzer - Safe Or Not?

I need to use a USB analyzer. I've been looking at a couple of different options. This one came up. As far as I can tell, it's not open source, but seems to be quite popular. Seeing that the data ...
5
votes
3answers
486 views

Possible to use *only* U2F authentication?

Using a U2F USB authentication key to login to services such as Google seems a good idea. However, these services often allow you to register a backup two-factor-authentication (2FA) method, which you ...
2
votes
1answer
248 views

Is USB type c vulnerable to BadUSB?

Consider the new SanDisk ultra dual type c flash drive. Would that be safer once computers start to come with type c ports?
0
votes
0answers
101 views

Re: Intel IME\physical-access exploits - Has a Manufacturer ever (unintentionally) released malware-infected PC Components?

Given the discovery that Intel's IME can be hacked by USB (since 2008), I started researching hardware level exploits - like the Stuxnet USB attack on Iran's Nuclear plant and I'm curious about the ...
0
votes
1answer
158 views

Have the recent Linux kernel USB vulnerabilities found by Andrey Konovalov been patched?

Have the Linux USB drivers been patched for the recent vulnerabilities that have been found by Andrey Konovalov (Google)? If not what can be done to protect against these attacks other than avoiding ...
3
votes
2answers
640 views

How to protect/mitigate IntelME (CSME) JTAG attack over USB?

Two security searchers from ptsecurity.com ( Maxim Goryachy‏ @h0t_max and Mark Ermolov @_markel___ ) have announced on Twitter: Game over! We (I and @_markel___ ) have obtained fully functional ...
1
vote
1answer
125 views

Analyzing possible encrypted USB stick

I was given an USB stick which was used to secure some data from a work computer. However - the USB stick seems broken now, or encrypted, which would mean the information might be lost. So, when ...
0
votes
1answer
272 views

Mouse receiver shows up as keyboard too - is this an issue?

I have recently seen some wireless mice that when the receiver is plugged in to a USB port, Windows device manager shows a new "HID-compliant mouse" (as expected) and also an "HID-compliant keyboard." ...
1
vote
3answers
2k views

Is there a USB exploit to bypass Windows password login?

I work for a small-medium company doing most of the IT tasks, including systems administration, network administration, and even developing in-house software. Recently, my boss (the CEO) told me that ...
1
vote
3answers
116 views

Security of mapping Local Resources over RDP

I work with a group of developers that do network level program. To prevent these developers from accidentally causing problems on the corporate network they have been given there own isolated ...
0
votes
1answer
129 views

Protect computer from usb device [duplicate]

I need to plug a cctv style camera via usb on my computer in order to read what it recorded. In general, how can I protect the computer I plug a usb device into, if I am worried the USB device might ...
6
votes
3answers
272 views

Is it safe to connect a random USB battery from a bin to my phone without stopping data transfer in some way?

I've asked the question Power-only USB connection to charge my phone - as simple as cutting the data lines? in electronics SE. In order to bypass the "Why do you want to do this?" request for ...
4
votes
1answer
352 views

Can I safely use a physical USB stick inside VirtualBox (isolated) without possibly infecting the host OS?

There is a program that I wish to run under VirtualBox in order to avoid possibly infecting my computer because I am not sure I should trust the source. (Based on download location). It is for ...
2
votes
2answers
1k views

USB Killer Protection

Is there any way to protect computers from the USB vulnerabilities exploited by the likes of USB Killer and other similar attacks? (Protection aside from a strict data protection compliance schemes ...
0
votes
1answer
329 views

How to prevent USB flash drive viruses

Can anyone tell me what is the safest way to use flash drive in a secured network( I am not looking for a way to block it). i need a safe practice to use flash drive in a windows network. My ...
1
vote
0answers
125 views

Overwrite USB write protection switch on MP3 players [closed]

I found a bunch of old USB MP3 players that are knockoffs of the iPod Nano. They have no logos on them. Some of them have a hold switch and on the computer it appears to offer write protection and ...
1
vote
2answers
534 views

How can I connect a USB device to a virtual machine while bypassing the host?

From time-to-time it would be useful to connect an untrusted USB device to my computer. If I could connect it directly to a virtual machine, bypassing the host. that would be secure enough for me. I ...
2
votes
0answers
162 views

Linux selective USB-Locking against evil-maid-attacks [closed]

While the question of completely disabling usb-controllers and -storage to defeat an evil-maid-attack has already been answered here quite often, I have a different solution in mind. Upon locking the ...
4
votes
4answers
223 views

Risk of connecting found pendrives to USB ports

At work we mostly use Windows 10, but some co-workers doing design work use Macs. Pen-drives lie around and the only way of knowing what's inside, is to stick it into a PC and read the content? How ...
-1
votes
1answer
97 views

MicroUSB equivilent of the Killer USB drive?

There's something so satisfying about the killer usb drive: https://arstechnica.com/security/2015/10/usb-killer-flash-drive-can-fry-your-computers-innards-in-seconds/ 220 volts straight to the ...