Questions tagged [usb]

an industry standard used for connecting to and powering peripheral devices (keyboards, mice, cameras, printers, external hard drives, etc) from a computer or other USB capable device.

Filter by
Sorted by
Tagged with
2 votes
2 answers
2k views

How can I connect a USB device to a virtual machine while bypassing the host?

From time-to-time it would be useful to connect an untrusted USB device to my computer. If I could connect it directly to a virtual machine, bypassing the host. that would be secure enough for me. I ...
paj28's user avatar
  • 33.4k
2 votes
0 answers
293 views

Linux selective USB-Locking against evil-maid-attacks [closed]

While the question of completely disabling usb-controllers and -storage to defeat an evil-maid-attack has already been answered here quite often, I have a different solution in mind. Upon locking the ...
Lars's user avatar
  • 121
4 votes
4 answers
409 views

Risk of connecting found pendrives to USB ports

At work we mostly use Windows 10, but some co-workers doing design work use Macs. Pen-drives lie around and the only way of knowing what's inside, is to stick it into a PC and read the content? How ...
Jean McLein's user avatar
-1 votes
1 answer
168 views

MicroUSB equivilent of the Killer USB drive?

There's something so satisfying about the killer usb drive: https://arstechnica.com/security/2015/10/usb-killer-flash-drive-can-fry-your-computers-innards-in-seconds/ 220 volts straight to the ...
user avatar
0 votes
2 answers
302 views

Is there a portable memory device with an offline erase technique? (such as an erase switch?)

I know about the USB devices that have a write protection switch that disables writing on the device side, are there devices that have a similar hardware switch that permanently erases the devices ...
daniel's user avatar
  • 774
1 vote
4 answers
4k views

Can live bootable usb be infected by malware on hard disk?

I have an old hard disk which I think has every kind of malware on it, maybe even MBR malware. It is also possible that there is malware for Linux on it too, because the disk is a dual boot Windows XP ...
zack's user avatar
  • 31
0 votes
0 answers
515 views

Can a mac carry viruses that could infect a pc via usb stick?

It is common practice for lots of users not to have an antivirus installed in their mac. Even if the viruses cannot infect the mac, can viruses be carried in it and spread to a pc via a usb stick? Is ...
papakias's user avatar
  • 215
11 votes
4 answers
21k views

How to detect a keylogger in a USB keyboard? Can a USB keyboard host a keylogger?

I recently got an USB keyboard. I want to investigate if the microcontroller of the keyboard may host a keylogger and how could it interact with a Windows OS. My understanding is that, once Windows ...
Alex's user avatar
  • 213
0 votes
1 answer
479 views

USB stick encryption on specific network/domain

I am in a difficult situation here. For my company I need to make the use of USB sticks secure, their demand is that when someone uses a USB stick it will only be readable and accessible on the ...
user avatar
55 votes
13 answers
23k views

Allow only specific devices to be connected to USB

Suppose I have a Windows PC in a safe room, disconnected from the internet, with only 3 cables connecting to another room, to a mouse, monitor and keyboard. The computer contains highly sensitive ...
Marcelo Glasberg's user avatar
3 votes
2 answers
4k views

Is it possible to hack a device via the USB port on an airplane?

Nearly every airplane these days has 5V USB power port at every seat. Some of these appear to be configured for power only, while others appear to be configured for both power and data transfer, since ...
Dan A.'s user avatar
  • 133
0 votes
1 answer
338 views

Do VB Macro viruses (ie macros in Microsoft office documents) affect modern Linux systems?

In the area I live and work, viruses in outdated and pirated windows systems are absolutely rampant. (Moreso even than in the "normal" world). It's utter madness to plug in a USB drive anywhere. ...
Netcat's user avatar
  • 1
0 votes
1 answer
132 views

Ipod Classic w/ torrented files

My friend gave me his old iPod classic, but it's got a bunch of torrented music on it; I want to wipe it with Disc Utility or perhaps GParted and start fresh... because I don't trust torrented files. ...
Kellen Stuart's user avatar
0 votes
1 answer
464 views

Can everyone see my Chrome passwords if they boot a live Linux distro?

I have an iMac 27" Late 2012. My browser is Google Chrome and I have a handful of passwords saved in it. When I come across a website that requires authentication, Chrome automates it without asking ...
Manchineel's user avatar
6 votes
3 answers
11k views

Why use a USB WiFi adapter with Aircrack-ng?

What are the limitations we have when we are performing aircrack-ng pen testing using laptop's built-in WiFi adapter? Many pen testers are using USB WiFi dongles for this purpose and I wonder why. ...
user3496510's user avatar
  • 1,287
71 votes
9 answers
15k views

How can "USB stick" online identification possibly work?

My bank recently revamped its website, and it changed for the better as far as I’m concerned. Especially, security seems to have been dramatically enhanced. Most importantly, they introduced a rather ...
user avatar
1 vote
1 answer
599 views

How to protect against USB malware? [duplicate]

What measures should I take to avoid any infection through USB devices? For example, there is a tiny virus called shortcut which hides your files and put shortcuts instead. I was wondering if there ...
Arslan Smal's user avatar
1 vote
0 answers
274 views

.7z encrypted archive, how much is secure? [duplicate]

I have a standard USB where i store secret info into a .7z encrypted archive with a 40 digit password (with upper case, numbers, special characters), I would know how safe is it against FBI for ...
Alex's user avatar
  • 11
1 vote
1 answer
287 views

What are the risks of connecting a Raspberry Pi to a PC? [closed]

I was wondering what are the risks of connect a Raspberry pi to a PC through the USB port?I could think of HID emulation and keystroke injection into the victims PC.Other than that what are the ...
PMD's user avatar
  • 199
1 vote
2 answers
207 views

How to protect a PC against sensitive data access by malicious app/driver

As a software developer I frequently work with various USB-attached peripherals in the prototype stage and their drivers. Sometimes the peripherals come from companies that I do not know well or ...
rsp1984's user avatar
  • 143
5 votes
0 answers
2k views

Storing SSH keys on a dedicated hardware device [closed]

When setting up a remote SSH access for an automated job, I realized that one of the main risks would be that the client machine gets hacked and the key stolen, giving the attacker access to the ...
Petr's user avatar
  • 517
0 votes
1 answer
226 views

PoisonTap + SSL Stripping a good combo?

One of the remediation suggestions to go with PoisonTap is enforce the use of SSL on applications to dissuade sniffing/modification of data. What if the attacker also employed SSL stripping? From Samy ...
katrix's user avatar
  • 553
61 votes
4 answers
9k views

How worried should I be about getting hacked with PoisonTap?

I just heard of PoisonTap today. Here is a short description from a TechCrunch article: PoisonTap connects to the USB port and announces itself not as a USB device, but an Ethernet interface. The ...
Dennis Jaheruddin's user avatar
33 votes
9 answers
8k views

Is it safe to use cheap USB data cables?

Websites like Amazon and eBay sell USB data cables for a pittance, often of unknown or dubious provenance. Should I be wary of using these cables to transfer data to or from my devices? Is it ...
Will Vousden's user avatar
5 votes
1 answer
3k views

How does holding the shift key protect my system from viruses on an USB?

I saw a tip on our local cyber security center informational page that holding the shift key on Windows while inserting a USB drive protect the system from being filled or attacked by malwares on that ...
dev-masih's user avatar
  • 153
5 votes
3 answers
299 views

USB modem software installs autorun.inf parser, are there any risks?

A major telecommunications device manufacturer ships its USB modem with helper software and drivers so that the user can connect to the internet and send/receive SMS. Since recent versions of Windows ...
user avatar
1 vote
2 answers
277 views

Autorunning program on a USB drive

Is there a way to automatically run a program (e.g. Python or C++) on a USB drive and bypass the popup window in Windows 10 (showing the different choices you have for the drive)? I have seen that ...
StoneSwine's user avatar
1 vote
4 answers
1k views

How to properly wipe data from a USB?

I have recently deleted all the files from my USB. Is this data permanently gone, or is there someway of retrieving it (I want to make sure it's gone forever!). What are the best methods for ...
user1513637's user avatar
0 votes
1 answer
1k views

Is a lockscreen a deterrent to a USB Rubber Ducky style of attack?

Lets say we are on the Linux platform and usb is authorized to work by default. From what I understand USB Rubber Ducky acts as a keyboard and tries to type in bash commands right? But what if the ...
user20731's user avatar
2 votes
1 answer
263 views

TOR Nodes silently bundled into mass produced usb devices?

This is a matter of curiosity more than of practicality, but would it be possible for a hypothetical manufacturer (hereinafter referred to as International Company Of Mystery or INCOMOM) so inclined ...
Ajacmac's user avatar
  • 21
1 vote
2 answers
2k views

Friend borrowed gaming keyboard to use on severely virus infected pc. danger to keyboard?

is it possible for my keyboard, a Logitech G910 Orion Spark to get infected with a virus or a keylogger after a friend used it to type in his log in password? his laptop's built in keyboard wasnt ...
BlueWreck's user avatar
1 vote
1 answer
1k views

Is YubiKey vulnerable to BadUSB exploits?

I know that BadUSB (revealed by srlabs.de a number of years ago) works by altering the actually firmware of a particular make of USB device, and as such my trusted systems have their own designated ...
Rice's user avatar
  • 480
0 votes
4 answers
5k views

How to prevent usb rubber ducky type of attacks on Linux? [duplicate]

Afaik usb rubber ducky acts as a keyboard and not a regular usb, which allows it to type in hundreds of commands on any computer that it is plugged into in a matter of seconds. What are the measures ...
user20731's user avatar
0 votes
2 answers
4k views

Is it safe to connect phone to desktop computer on USB?

For example, if my phone is compromised, can it execute code on my desktop computer just by plugging it in USB? Or vice versa. I ask because banks' and other services' 2-factor authentication commonly ...
Atte Juvonen's user avatar
3 votes
1 answer
851 views

What are the risks and effects of the feared "Killer USB stick"?

A Russian security researcher known as "Dark Purple" has created a USB stick that contains an unusual payload. It doesn't install malware or exploit a zero-day vulnerability. Instead, the ...
Bob Ortiz's user avatar
  • 6,661
2 votes
1 answer
157 views

Is there a solution that shows a prompt before mounting an USB drive?

Is there such thing as a prompt that asks for permission to mount an detected USB device? In order to prevent against physical attacks with USB devices. Like "A USB device is detected would you like ...
Bob Ortiz's user avatar
  • 6,661
2 votes
4 answers
1k views

Sanitizing a USB HDD in Linux

I want to check that an external USB hard disk drive is free of viruses and malware before connecting it to my primary use computer. I have it in mind to perform the following steps to ensure that ...
hare jebus's user avatar
4 votes
3 answers
197 views

what are security precautions to ask clients who send a USB or CD?

We're launching a tender for a big project, and some of the businesses who want to make an offer are asking if they can send some brochures together with a USB stick or CD-Rom. Since we're trying to ...
N. VanRaendom's user avatar
3 votes
2 answers
8k views

Does the use of an on-screen keyboard give a false sense of security or protect against all types of keyloggers? [duplicate]

Does the use of an on-screen keyboard (OSK) give a false sense of security? For example when people use the OSK in an attempt to prevent key-loggers from logging information like passwords, typed on ...
Bob Ortiz's user avatar
  • 6,661
3 votes
3 answers
1k views

"Mousejack" a wired (non-wireless) mouse

Is it possible a wired mouse can be a malicious device? For example, could a keylogger be installed within a wired mouse that captures keystrokes and sends these to an external server via the internet ...
Toby's user avatar
  • 43
1 vote
0 answers
978 views

Fuzzing an iPhone

I'm currently researching how to fuzz Apple devices (specifically an iPhone 4 and an iPad 2). The devices are placed into DFU mode and then accessed using OpeniBoot. I've read through a good chunk of ...
C_Hug's user avatar
  • 11
2 votes
1 answer
3k views

How is it possible for a USB device posing as a keyboard to auto-run a script without user input?

I know the "USB Rubber Ducky" pretends to be a keyboard toward the OS, but I still don't understand how he can launch a script... Normal keyboard can't just initiate keypress by itself right? Or ...
Duke Nukem's user avatar
44 votes
1 answer
4k views

Why is Firewire a bigger threat than USB?

This question notes that a person briefly connected an Android device to an Apple computer via USB, and one comment indicates that it would "quite possibly" be a risk: In theory, yes, in practice, ...
Torben Gundtofte-Bruun's user avatar
31 votes
5 answers
6k views

Is disallowing write to USB actually an efficient way to prevent data leakage?

In my organization, a group policy exists that prevents users from writing data to a USB stick. This always seemed like a bit of a pointless PITA to me, just "one of those things...". I forget about ...
Peter Vandivier's user avatar
52 votes
6 answers
12k views

Am I at risk if I let someone charge their Android phone from my MacBook through a micro USB cable?

Someone connected their Android phone to my MacBook and it made me think if this has put my MacBook at risk. It was for 3 seconds and I was in control of the MacBook the whole time.
Emanuil Rusev's user avatar
-1 votes
2 answers
647 views

How can I prevent booting from media devices?

first of all, I deeply apologise because of my silly question. The thing is that I am learning about hardening. I have VMware workstation 12, and I've created a VM CentOS 7 machine (to be integrated ...
BRDennehy's user avatar
89 votes
9 answers
16k views

Secure USB cable for charging in untrusted environments

On a long haul flight, I imagine that charging a phone (in flight mode) with the inbuilt USB port on the head rest would be a security risk. Could I mitigate that risk by taking a regular USB cable ...
DarcyThomas's user avatar
  • 1,298
2 votes
1 answer
2k views

Is moving data between devices on an SD Card safer than a USB stick?

From the perspective of USB device-born malware/exploits, especially affecting firmware (e.g., can an infected computer reprogram an inserted USB memory stick to act like a keyboard and autotype ...
user109295's user avatar
1 vote
0 answers
267 views

USB TEMPEST attacks: viable range?

Is there any published research into the viability of reading Universal Serial Bus signals at a distance from the connection, using electromagnetic radiation emitted from the bus? If not, what is the ...
sampablokuper's user avatar
1 vote
1 answer
157 views

Would it be possible to fix the security flaws inherent in USB technology? [closed]

Many questions and answers on this site discuss the various risks related to USB. I'll refer to this one as an example. I wonder if it would be possible to devise a different design (or in general, ...
Francesco's user avatar
  • 231