Questions tagged [usb]

an industry standard used for connecting to and powering peripheral devices (keyboards, mice, cameras, printers, external hard drives, etc) from a computer or other USB capable device.

Filter by
Sorted by
Tagged with
1
vote
1answer
110 views

Security considerations for USB keyboard/mouse switches

I am considering purchasing a basic USB keyboard/mouse switching box in order to allow me to use the same keyboard and mouse with two different physical machines. This is similar to a KVM (keyboard ...
4
votes
1answer
239 views

Can smart power meters read key presses on a wired keyboard?

Smart power meters are becoming quite prevalent. Question: Can a smart power meter (with patched firmware) read the keys pressed on a wired PS/2 or USB keyboard, connected to a desktop computer? What ...
2
votes
2answers
505 views

Can a program containing virus, used to flash USB firmware infect it despite formatting?

I was having problems with my Kingston 8GB USB drive (it kept saying "write protected"). I solved the problem by first using ChipGenius and then a program called "Restore v3.13.0.0". I downloaded from ...
4
votes
1answer
2k views

Is all the alarmism around BadUSB really called for with respect to host devices?

I can understand why there was such a furor about BadUSB and indeed it poses a rather earthshaking threat to the base assumptions of many in their cyber security threat models. Things which many of us ...
1
vote
1answer
287 views

USBlyzer - Safe Or Not?

I need to use a USB analyzer. I've been looking at a couple of different options. This one came up. As far as I can tell, it's not open source, but seems to be quite popular. Seeing that the data ...
6
votes
4answers
783 views

Possible to use *only* U2F authentication?

Using a U2F USB authentication key to login to services such as Google seems a good idea. However, these services often allow you to register a backup two-factor-authentication (2FA) method, which you ...
2
votes
1answer
316 views

Is USB type c vulnerable to BadUSB?

Consider the new SanDisk ultra dual type c flash drive. Would that be safer once computers start to come with type c ports?
0
votes
0answers
106 views

Re: Intel IME\physical-access exploits - Has a Manufacturer ever (unintentionally) released malware-infected PC Components?

Given the discovery that Intel's IME can be hacked by USB (since 2008), I started researching hardware level exploits - like the Stuxnet USB attack on Iran's Nuclear plant and I'm curious about the ...
0
votes
1answer
211 views

Have the recent Linux kernel USB vulnerabilities found by Andrey Konovalov been patched?

Have the Linux USB drivers been patched for the recent vulnerabilities that have been found by Andrey Konovalov (Google)? If not what can be done to protect against these attacks other than avoiding ...
3
votes
2answers
789 views

How to protect/mitigate IntelME (CSME) JTAG attack over USB?

Two security searchers from ptsecurity.com ( Maxim Goryachy‏ @h0t_max and Mark Ermolov @_markel___ ) have announced on Twitter: Game over! We (I and @_markel___ ) have obtained fully functional ...
1
vote
1answer
143 views

Analyzing possible encrypted USB stick

I was given an USB stick which was used to secure some data from a work computer. However - the USB stick seems broken now, or encrypted, which would mean the information might be lost. So, when ...
0
votes
1answer
721 views

Mouse receiver shows up as keyboard too - is this an issue?

I have recently seen some wireless mice that when the receiver is plugged in to a USB port, Windows device manager shows a new "HID-compliant mouse" (as expected) and also an "HID-compliant keyboard." ...
1
vote
3answers
4k views

Is there a USB exploit to bypass Windows password login?

I work for a small-medium company doing most of the IT tasks, including systems administration, network administration, and even developing in-house software. Recently, my boss (the CEO) told me that ...
1
vote
3answers
252 views

Security of mapping Local Resources over RDP

I work with a group of developers that do network level program. To prevent these developers from accidentally causing problems on the corporate network they have been given there own isolated ...
0
votes
1answer
142 views

Protect computer from usb device [duplicate]

I need to plug a cctv style camera via usb on my computer in order to read what it recorded. In general, how can I protect the computer I plug a usb device into, if I am worried the USB device might ...
6
votes
3answers
286 views

Is it safe to connect a random USB battery from a bin to my phone without stopping data transfer in some way?

I've asked the question Power-only USB connection to charge my phone - as simple as cutting the data lines? in electronics SE. In order to bypass the "Why do you want to do this?" request for ...
4
votes
1answer
561 views

Can I safely use a physical USB stick inside VirtualBox (isolated) without possibly infecting the host OS?

There is a program that I wish to run under VirtualBox in order to avoid possibly infecting my computer because I am not sure I should trust the source. (Based on download location). It is for ...
3
votes
2answers
3k views

USB Killer Protection

Is there any way to protect computers from the USB vulnerabilities exploited by the likes of USB Killer and other similar attacks? (Protection aside from a strict data protection compliance schemes ...
0
votes
1answer
447 views

How to prevent USB flash drive viruses

Can anyone tell me what is the safest way to use flash drive in a secured network( I am not looking for a way to block it). i need a safe practice to use flash drive in a windows network. My ...
1
vote
0answers
165 views

Overwrite USB write protection switch on MP3 players [closed]

I found a bunch of old USB MP3 players that are knockoffs of the iPod Nano. They have no logos on them. Some of them have a hold switch and on the computer it appears to offer write protection and ...
1
vote
2answers
817 views

How can I connect a USB device to a virtual machine while bypassing the host?

From time-to-time it would be useful to connect an untrusted USB device to my computer. If I could connect it directly to a virtual machine, bypassing the host. that would be secure enough for me. I ...
2
votes
0answers
213 views

Linux selective USB-Locking against evil-maid-attacks [closed]

While the question of completely disabling usb-controllers and -storage to defeat an evil-maid-attack has already been answered here quite often, I have a different solution in mind. Upon locking the ...
4
votes
4answers
257 views

Risk of connecting found pendrives to USB ports

At work we mostly use Windows 10, but some co-workers doing design work use Macs. Pen-drives lie around and the only way of knowing what's inside, is to stick it into a PC and read the content? How ...
-1
votes
1answer
103 views

MicroUSB equivilent of the Killer USB drive?

There's something so satisfying about the killer usb drive: https://arstechnica.com/security/2015/10/usb-killer-flash-drive-can-fry-your-computers-innards-in-seconds/ 220 volts straight to the ...
0
votes
2answers
226 views

Is there a portable memory device with an offline erase technique? (such as an erase switch?)

I know about the USB devices that have a write protection switch that disables writing on the device side, are there devices that have a similar hardware switch that permanently erases the devices ...
1
vote
4answers
1k views

Can live bootable usb be infected by malware on hard disk?

I have an old hard disk which I think has every kind of malware on it, maybe even MBR malware. It is also possible that there is malware for Linux on it too, because the disk is a dual boot Windows XP ...
0
votes
0answers
401 views

Can a mac carry viruses that could infect a pc via usb stick?

It is common practice for lots of users not to have an antivirus installed in their mac. Even if the viruses cannot infect the mac, can viruses be carried in it and spread to a pc via a usb stick? Is ...
6
votes
2answers
6k views

How to detect a keylogger in a USB keyboard? Can a USB keyboard host a keylogger?

I recently got an USB keyboard. I want to investigate if the microcontroller of the keyboard may host a keylogger and how could it interact with a Windows OS. My understanding is that, once Windows ...
0
votes
1answer
231 views

USB stick encryption on specific network/domain

I am in a difficult situation here. For my company I need to make the use of USB sticks secure, their demand is that when someone uses a USB stick it will only be readable and accessible on the ...
53
votes
13answers
16k views

Allow only specific devices to be connected to USB

Suppose I have a Windows PC in a safe room, disconnected from the internet, with only 3 cables connecting to another room, to a mouse, monitor and keyboard. The computer contains highly sensitive ...
3
votes
2answers
2k views

Is it possible to hack a device via the USB port on an airplane?

Nearly every airplane these days has 5V USB power port at every seat. Some of these appear to be configured for power only, while others appear to be configured for both power and data transfer, since ...
0
votes
1answer
258 views

Do VB Macro viruses (ie macros in Microsoft office documents) affect modern Linux systems?

In the area I live and work, viruses in outdated and pirated windows systems are absolutely rampant. (Moreso even than in the "normal" world). It's utter madness to plug in a USB drive anywhere. ...
0
votes
1answer
85 views

Ipod Classic w/ torrented files

My friend gave me his old iPod classic, but it's got a bunch of torrented music on it; I want to wipe it with Disc Utility or perhaps GParted and start fresh... because I don't trust torrented files. ...
0
votes
1answer
191 views

Can everyone see my Chrome passwords if they boot a live Linux distro?

I have an iMac 27" Late 2012. My browser is Google Chrome and I have a handful of passwords saved in it. When I come across a website that requires authentication, Chrome automates it without asking ...
6
votes
3answers
8k views

Why use a USB WiFi adapter with Aircrack-ng?

What are the limitations we have when we are performing aircrack-ng pen testing using laptop's built-in WiFi adapter? Many pen testers are using USB WiFi dongles for this purpose and I wonder why. ...
71
votes
9answers
14k views

How can “USB stick” online identification possibly work?

My bank recently revamped its website, and it changed for the better as far as I’m concerned. Especially, security seems to have been dramatically enhanced. Most importantly, they introduced a rather ...
1
vote
1answer
433 views

How to protect against USB malware? [duplicate]

What measures should I take to avoid any infection through USB devices? For example, there is a tiny virus called shortcut which hides your files and put shortcuts instead. I was wondering if there ...
1
vote
0answers
161 views

.7z encrypted archive, how much is secure? [duplicate]

I have a standard USB where i store secret info into a .7z encrypted archive with a 40 digit password (with upper case, numbers, special characters), I would know how safe is it against FBI for ...
1
vote
1answer
223 views

What are the risks of connecting a Raspberry Pi to a PC? [closed]

I was wondering what are the risks of connect a Raspberry pi to a PC through the USB port?I could think of HID emulation and keystroke injection into the victims PC.Other than that what are the ...
1
vote
2answers
113 views

How to protect a PC against sensitive data access by malicious app/driver

As a software developer I frequently work with various USB-attached peripherals in the prototype stage and their drivers. Sometimes the peripherals come from companies that I do not know well or ...
5
votes
0answers
2k views

Storing SSH keys on a dedicated hardware device [closed]

When setting up a remote SSH access for an automated job, I realized that one of the main risks would be that the client machine gets hacked and the key stolen, giving the attacker access to the ...
0
votes
1answer
162 views

PoisonTap + SSL Stripping a good combo?

One of the remediation suggestions to go with PoisonTap is enforce the use of SSL on applications to dissuade sniffing/modification of data. What if the attacker also employed SSL stripping? From Samy ...
61
votes
4answers
9k views

How worried should I be about getting hacked with PoisonTap?

I just heard of PoisonTap today. Here is a short description from a TechCrunch article: PoisonTap connects to the USB port and announces itself not as a USB device, but an Ethernet interface. The ...
33
votes
9answers
7k views

Is it safe to use cheap USB data cables?

Websites like Amazon and eBay sell USB data cables for a pittance, often of unknown or dubious provenance. Should I be wary of using these cables to transfer data to or from my devices? Is it ...
4
votes
1answer
1k views

How does holding the shift key protect my system from viruses on an USB?

I saw a tip on our local cyber security center informational page that holding the shift key on Windows while inserting a USB drive protect the system from being filled or attacked by malwares on that ...
5
votes
3answers
166 views

USB modem software installs autorun.inf parser, are there any risks?

A major telecommunications device manufacturer ships its USB modem with helper software and drivers so that the user can connect to the internet and send/receive SMS. Since recent versions of Windows ...
1
vote
2answers
178 views

Autorunning program on a USB drive

Is there a way to automatically run a program (e.g. Python or C++) on a USB drive and bypass the popup window in Windows 10 (showing the different choices you have for the drive)? I have seen that ...
1
vote
4answers
370 views

How to properly wipe data from a USB?

I have recently deleted all the files from my USB. Is this data permanently gone, or is there someway of retrieving it (I want to make sure it's gone forever!). What are the best methods for ...
0
votes
1answer
534 views

Is a lockscreen a deterrent to a USB Rubber Ducky style of attack?

Lets say we are on the Linux platform and usb is authorized to work by default. From what I understand USB Rubber Ducky acts as a keyboard and tries to type in bash commands right? But what if the ...
2
votes
1answer
199 views

TOR Nodes silently bundled into mass produced usb devices?

This is a matter of curiosity more than of practicality, but would it be possible for a hypothetical manufacturer (hereinafter referred to as International Company Of Mystery or INCOMOM) so inclined ...