Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [usb]

an industry standard used for connecting to and powering peripheral devices (keyboards, mice, cameras, printers, external hard drives, etc) from a computer or other USB capable device.

-1
votes
0answers
25 views

can malware shut off a UPS/battery backup attached to the PC via USB

My not inexpensive ($200) UPS has been instantaneously cutting off recently for no apparent reason. It's like pulling the plug on the PC. There's no warning beep, no error messages on the LCD screen ...
1
vote
2answers
118 views

How we can prevent innocent looking USBNinja cable attacks in our organization?

Is there anything we can do across an organization to make sure USBNinja and other similar USB cables that looks so real for users can really be mitigated?
1
vote
1answer
70 views

How to prevent a virus from stealing data when I transfer files between offline and online computers?

Let's say I have one offline computer with some important data, and one online computer. Sometimes I need to move files from the offline computer to the online one. When I transfer those files, is ...
1
vote
1answer
29 views

Reading SD cards on a GPO blocked USB [closed]

Our company has a GPO which blocks USB mass storage devices. The GPO permits Media Transfer Protocol (MTP) connections. Some SD card-based camera devices don't support MTP so they are blocked as they ...
0
votes
0answers
38 views

How can you prevent flashing of malicious firmware for USB (or SATA) hard drives?

I am assuming no physical access. Some devices have signed firmware so this makes it a bit harder though not impossible. Is there anything an end user can do to make it harder for an attacker? Maybe ...
1
vote
2answers
257 views

Can infection effect a phone through it's wireless hotspot, also the usb tethering

If I made a wireless hotspot from my phone and had computers infected with malware connect and use my wireless connection of the phone can any malware from the pc get into the phone? If my phone was ...
0
votes
1answer
88 views

Which encrypted USB stick is the better option? [closed]

I am looking for a hardware encrypted USB stick to carry some important files such as my KeePassXC database, Key files, cryptocurrency wallets, certificates and other stuff with me. There are some ...
2
votes
3answers
144 views

Is it possible to check if a USB's firmware is unmodified when plugged in?

Let's say I have some USB stick that I know and trust. I can examine the firmware and generate a checksum for it. Can I use this checksem to ensure that when the USB is next plugged in the firmware ...
0
votes
1answer
69 views

Working from a USB [closed]

I have a Mac for my work laptop and I would like to work on my xCode project, I can't work on the laptop directly and save the file to computer due to fears that it could one day be recovered & be ...
2
votes
2answers
67 views

Is there a risk in rebooting a smartphone while it's connected to an unknown USB port?

I rebooted my phone while it was connected to the PC and saw a notification about a failed device installation. Looked up the text and the code, and it turns out my phone exposes a certain way to ...
3
votes
1answer
261 views

Is it possible to bypass USB access restriction placed by the Active Directory? [closed]

I've been tasked with an onsite engagement to see what I can find from one of their laptops. They have a policy in place to block USB access through the Active Directory, e.g. When you try to access ...
5
votes
1answer
256 views

Are PS/2 devices a risky piece of hardware for modern point of sale devices to be using?

This question is based off of a TempleOS question here on Super User. The gist is that PS/2 support seems to be disabled from many modern BIOS’es due to a possible security flaw in the protocol. ...
3
votes
2answers
119 views

If I format a USB stick, will the old contents be recoverable?

I have read that the "safest" way to make sensitive USB contents un-recoverable is to hammer to pieces the USB stick. Indeed, a quick search on Google shows up hundreds of ways to "recover usb files" ...
2
votes
2answers
401 views

How protect ourselves from USB Firmware viruses? Does Antivirus help?

On Windows (pnd probably other operating systems, I don't know), when you plug in a USB appliance (a flash drive, mouse, etc) Windows automatically runs the "Device installation" and the firmware is ...
1
vote
2answers
115 views

How to find if a USB has been plugged in on a certain date? (Linux/Mac)

Starting from this great script offered by Daniel Azuelos cd /Volumes/suspicious_USB /usr/bin/sudo find . -atime -21 -exec ls -dluT {} \; How is it possible to modify it in order to find if a USB ...
-2
votes
2answers
108 views

Creating portable bash terminal & cmd to USB [closed]

Developing my toolkit and I want to have a safe edition of cmd.exe and bash on a usb. Why? These can be tampered with by attackers and I want a version I know is safe from manipulation. Any ...
2
votes
1answer
338 views

How can a user defeat anti-live forensics software?

Let's say I have a computer with full disk encryption which is logged and running, but I suspect it has anti-forensics software (eg. usbkill), which means that I risk compromising the integrity of the ...
3
votes
1answer
241 views

TLS/SSL over USB using OpenSSL [closed]

I want to secure the communication of an embedded device that is connected to a host via USB. At the moment I'm considering using the openssl library. I can use it on the embedded device and on the ...
0
votes
0answers
54 views

Can you get a virus / malware just by plugging in a USB device? [duplicate]

I recently bought an electronic cigarette lighter which is charged via USB. I have no idea if the company that made it is trustworthy as it is one of those no-name brands. The thing that concerns me ...
5
votes
1answer
86 views

Does using an UPS mitigate power-analysis attacks on a keyboard?

Are there any papers that can document that using an online UPS (Uninterruptible Power Supply) can reliably protect against power-analysis attacks that attempt to read keystrokes on wired keyboards? ...
1
vote
1answer
69 views

Security considerations for USB keyboard/mouse switches

I am considering purchasing a basic USB keyboard/mouse switching box in order to allow me to use the same keyboard and mouse with two different physical machines. This is similar to a KVM (keyboard ...
4
votes
1answer
199 views

Can smart power meters read key presses on a wired keyboard?

Smart power meters are becoming quite prevalent. Question: Can a smart power meter (with patched firmware) read the keys pressed on a wired PS/2 or USB keyboard, connected to a desktop computer? What ...
2
votes
2answers
349 views

Can a program containing virus, used to flash USB firmware infect it despite formatting?

I was having problems with my Kingston 8GB USB drive (it kept saying "write protected"). I solved the problem by first using ChipGenius and then a program called "Restore v3.13.0.0". I downloaded from ...
3
votes
1answer
594 views

Is all the alarmism around BadUSB really called for with respect to host devices?

I can understand why there was such a furor about BadUSB and indeed it poses a rather earthshaking threat to the base assumptions of many in their cyber security threat models. Things which many of us ...
0
votes
1answer
159 views

USBlyzer - Safe Or Not?

I need to use a USB analyzer. I've been looking at a couple of different options. This one came up. As far as I can tell, it's not open source, but seems to be quite popular. Seeing that the data ...
5
votes
3answers
419 views

Possible to use *only* U2F authentication?

Using a U2F USB authentication key to login to services such as Google seems a good idea. However, these services often allow you to register a backup two-factor-authentication (2FA) method, which you ...
2
votes
1answer
232 views

Is USB type c vulnerable to BadUSB?

Consider the new SanDisk ultra dual type c flash drive. Would that be safer once computers start to come with type c ports?
0
votes
0answers
99 views

Re: Intel IME\physical-access exploits - Has a Manufacturer ever (unintentionally) released malware-infected PC Components?

Given the discovery that Intel's IME can be hacked by USB (since 2008), I started researching hardware level exploits - like the Stuxnet USB attack on Iran's Nuclear plant and I'm curious about the ...
0
votes
1answer
146 views

Have the recent Linux kernel USB vulnerabilities found by Andrey Konovalov been patched?

Have the Linux USB drivers been patched for the recent vulnerabilities that have been found by Andrey Konovalov (Google)? If not what can be done to protect against these attacks other than avoiding ...
3
votes
2answers
598 views

How to protect/mitigate IntelME (CSME) JTAG attack over USB?

Two security searchers from ptsecurity.com ( Maxim Goryachy‏ @h0t_max and Mark Ermolov @_markel___ ) have announced on Twitter: Game over! We (I and @_markel___ ) have obtained fully functional ...
1
vote
1answer
122 views

Analyzing possible encrypted USB stick

I was given an USB stick which was used to secure some data from a work computer. However - the USB stick seems broken now, or encrypted, which would mean the information might be lost. So, when ...
0
votes
1answer
219 views

Mouse receiver shows up as keyboard too - is this an issue?

I have recently seen some wireless mice that when the receiver is plugged in to a USB port, Windows device manager shows a new "HID-compliant mouse" (as expected) and also an "HID-compliant keyboard." ...
0
votes
3answers
2k views

Is there a USB exploit to bypass Windows password login?

I work for a small-medium company doing most of the IT tasks, including systems administration, network administration, and even developing in-house software. Recently, my boss (the CEO) told me that ...
1
vote
3answers
96 views

Security of mapping Local Resources over RDP

I work with a group of developers that do network level program. To prevent these developers from accidentally causing problems on the corporate network they have been given there own isolated ...
0
votes
1answer
126 views

Protect computer from usb device [duplicate]

I need to plug a cctv style camera via usb on my computer in order to read what it recorded. In general, how can I protect the computer I plug a usb device into, if I am worried the USB device might ...
6
votes
3answers
263 views

Is it safe to connect a random USB battery from a bin to my phone without stopping data transfer in some way?

I've asked the question Power-only USB connection to charge my phone - as simple as cutting the data lines? in electronics SE. In order to bypass the "Why do you want to do this?" request for ...
4
votes
1answer
313 views

Can I safely use a physical USB stick inside VirtualBox (isolated) without possibly infecting the host OS?

There is a program that I wish to run under VirtualBox in order to avoid possibly infecting my computer because I am not sure I should trust the source. (Based on download location). It is for ...
2
votes
2answers
1k views

USB Killer Protection

Is there any way to protect computers from the USB vulnerabilities exploited by the likes of USB Killer and other similar attacks? (Protection aside from a strict data protection compliance schemes ...
0
votes
1answer
303 views

How to prevent USB flash drive viruses

Can anyone tell me what is the safest way to use flash drive in a secured network( I am not looking for a way to block it). i need a safe practice to use flash drive in a windows network. My ...
1
vote
0answers
115 views

Overwrite USB write protection switch on MP3 players [closed]

I found a bunch of old USB MP3 players that are knockoffs of the iPod Nano. They have no logos on them. Some of them have a hold switch and on the computer it appears to offer write protection and ...
1
vote
2answers
493 views

How can I connect a USB device to a virtual machine while bypassing the host?

From time-to-time it would be useful to connect an untrusted USB device to my computer. If I could connect it directly to a virtual machine, bypassing the host. that would be secure enough for me. I ...
2
votes
0answers
155 views

Linux selective USB-Locking against evil-maid-attacks [closed]

While the question of completely disabling usb-controllers and -storage to defeat an evil-maid-attack has already been answered here quite often, I have a different solution in mind. Upon locking the ...
4
votes
4answers
221 views

Risk of connecting found pendrives to USB ports

At work we mostly use Windows 10, but some co-workers doing design work use Macs. Pen-drives lie around and the only way of knowing what's inside, is to stick it into a PC and read the content? How ...
-1
votes
1answer
97 views

MicroUSB equivilent of the Killer USB drive?

There's something so satisfying about the killer usb drive: https://arstechnica.com/security/2015/10/usb-killer-flash-drive-can-fry-your-computers-innards-in-seconds/ 220 volts straight to the ...
0
votes
2answers
209 views

Is there a portable memory device with an offline erase technique? (such as an erase switch?)

I know about the USB devices that have a write protection switch that disables writing on the device side, are there devices that have a similar hardware switch that permanently erases the devices ...
1
vote
4answers
702 views

Can live bootable usb be infected by malware on hard disk?

I have an old hard disk which I think has every kind of malware on it, maybe even MBR malware. It is also possible that there is malware for Linux on it too, because the disk is a dual boot Windows XP ...
0
votes
0answers
297 views

Can a mac carry viruses that could infect a pc via usb stick?

It is common practice for lots of users not to have an antivirus installed in their mac. Even if the viruses cannot infect the mac, can viruses be carried in it and spread to a pc via a usb stick? Is ...
5
votes
2answers
3k views

How to detect a keylogger in a USB keyboard? Can a USB keyboard host a keylogger?

I recently got an USB keyboard. I want to investigate if the microcontroller of the keyboard may host a keylogger and how could it interact with a Windows OS. My understanding is that, once Windows ...
0
votes
1answer
172 views

USB stick encryption on specific network/domain

I am in a difficult situation here. For my company I need to make the use of USB sticks secure, their demand is that when someone uses a USB stick it will only be readable and accessible on the ...
53
votes
13answers
12k views

Allow only specific devices to be connected to USB

Suppose I have a Windows PC in a safe room, disconnected from the internet, with only 3 cables connecting to another room, to a mouse, monitor and keyboard. The computer contains highly sensitive ...