Questions tagged [usb]

an industry standard used for connecting to and powering peripheral devices (keyboards, mice, cameras, printers, external hard drives, etc) from a computer or other USB capable device.

Filter by
Sorted by
Tagged with
0
votes
0answers
252 views

Windows : security of USBNET / RNDIS

I'm having trouble finding documentation about how to setup any security for RNDIS or if the system is already secure enough. For those who doesn't know RNDIS is a protocol that permits a USB ...
0
votes
0answers
74 views

How can I prevent Ubuntu from automatically using an USB keyboard? [duplicate]

From what I understood, the possibility of having a multitude of device types connected to the computer via USB (keyboard, mouse, gadgets, sticks, webcams, ...) is a security risk: I connect a USB ...
-1
votes
1answer
476 views

Linux distribution on USB stick used to banking for begginers [closed]

Is it good idea to use up-to-date Linux on USB stick instead liveCD to online banking? What is the best Linux distribution for not advanced people who commonly use Windows to make online payments ...
3
votes
2answers
3k views

After I've plugged my phone into a computer to upload photos, can people see the photos I did not upload even after I unplugged my phone?

I plugged my phone into a computer at work to upload photos using a USB, then unplugged it. I only uploaded the photos I needed, however, could they somehow see the photos I didn't upload on the ...
1
vote
1answer
245 views

Given certain parameters, are there any risks with Android's USB Debugging?

Assuming: You control access to an Android device You never connect that Android device to a malware-infected system via a USB cable Are there any risks with keeping USB Debugging always enabled on ...
1
vote
2answers
523 views

Do USB flash drives delete a sector before writing to it?

I know that SSDs can't write to a non-empty sector, so must delete it first (and even support TRIM which resets them automatically after deletion). HDDs on the other, write to sectors before reseting ...
2
votes
0answers
1k views

USB Rubber Ducky Firmware Upgrade [closed]

I just erased my firmware, using dfu-programmer-0.7.2: $ dfu-programmer at32uc3b1256 erase Checking memory from 0x2000 to 0x3FFFF... Not blank at 0x2001. Erasing flash... Success Checking memory from ...
14
votes
5answers
9k views

Can autoplay USB stick spread virus to windows 8 or 10?

Autoplay was a security hole on older versions of Windows, but can I trust newer version like Windows 8 or 10 to insert USB stick without turning autoplay off?
33
votes
3answers
8k views

Can malware be transmitted via a USB charger plugged into a wall socket?

I have a smart phone that I often plug into a wall socket for charging via a small adapter that rectifies the AC to DC power and transforms the voltage from line (120V or 240V) to 5 V DC, probably ...
1
vote
1answer
88 views

What local ethernet-accessible resources can be accessed on a PC through a USB cable?

Clarification: this is about scanning the network resources on computer B from computer A in a situation where: Computer A is connected to Computer B through a USB cable Computer A has some scanning ...
0
votes
0answers
82 views

Encrypt a file before being copied

I am working on a program that will prevent data theft. I want to encrypt every file that is being copied to an external drive before it is actually copied using a symmetric encryption. Is it ...
6
votes
1answer
203 views

Can USB host ports be dangerous in uncontrolled environments? Virus etc?

(Note: I was told this post belongs here rather than in Android Enthusiasts) We have an Android device with 2 external USB host ports. Now I wonder what harm can be accomplished by an attacker with ...
1
vote
1answer
390 views

USB Modem risks

What are the risks associated with the use of portable USB modems, specifically uncontrolled BYOD USB modems as opposed to secure managed USB modems? I plan on allowing multiple users to plug their ...
7
votes
2answers
1k views

A compromised USB

Assuming that a given USB drive is compromised(infected), what's the best way to deal with it? I mean, obviously, the solution is to nuke(format) the drive. But for that, the device needs to be ...
5
votes
3answers
1k views

BadUSB: Why are firmware writeable in the first place? Manufacturer's backdoor?

How many of you have actually updated their mouse, keyboard or USB stick firmware? How many vendor actually propose updates for such devices? However these devices firmware often offer a proprietary ...
7
votes
0answers
280 views

Windows 10 installaton USBs sold by Microsoft [closed]

With the recent release of Microsoft's Windows 10, I dropped by a local Microsoft store to purchase a windows 10 installation media. To my surprise (somewhat) the employees said that they do not ...
2
votes
2answers
2k views

BAD USB attack possible while screen is locked?

If i leave my screen locked and someone sticks in a thumbdrive that was manipulated using the bad USB exploit would an attack be possible?
0
votes
2answers
688 views

Content on a usb flash drive available for a limited time [closed]

I need to distribute some content on a USB flash drive. This content should be available for a limited time only. I am looking for some approach to achieve above. So far I do not have information ...
3
votes
3answers
1k views

Server based pdf signing using etoken from a client browser

I have a requirement where a PDF document is generated on the application server in a web based .Net application and the same is digitally signed and mailed to the recepient. The signing and mail ...
0
votes
0answers
51 views

Is there a pre-established method for cracking RSA SecureID codes?

I am using the most modern version of RSA SecureID's tokens with a RSA server (used with a lot of governments and larger organizations ). I was just wondering if there was a pre-established method for ...
8
votes
2answers
1k views

Hardware devices for protecting against BadUSB?

Have any devices been released which protect against BadUSB attacks? I'm particularly interested in buying a USB hub which has the following protections: The USB hub itself won't allow reflashing ...
1
vote
1answer
429 views

Identifying USB Device Anomalies..? [closed]

I have a laptop with 4 USB ports, and I have an external 4 port splitter that I purchased off amazon. Plugged into that is an external USB audio card. The audio card has a line-in port and an audio ...
4
votes
1answer
879 views

How to check whether my USB flash drive was infected by the BadUSB

After failing to check whether my USB stick firmware can be rewritten AT ALL, I want find out, whether it WAS rewritten when I sticked it in another computer. In particular the question is: how to ...
19
votes
1answer
10k views

How to check if my USB stick firmware can be rewritten via the USB port?

How can I know in Linux (or otherwise), if the firmware of my USB flash drive can be rewritten using the USB port (when sticking it in an USB port)? Eg. for a cheap EMTEC 16GB. I was thinking about ...
10
votes
3answers
1k views

Disable USB keyboard pluggability on MacBook

I'm concerned about USB devices being physically attached to my MacBook laptop when I am about to unlock my computer or while my computer is unlocked. My threat model involves an attacker who is ...
3
votes
2answers
368 views

Questions regarding Bad USB exploit

I own a Netbook and my external DVD Drive is possibly infected with Bad USB. If I install Ubuntu using this infected DVD drive, could my system be taken over during installation process or later when ...
1
vote
1answer
142 views

How to protect against portable applications

There are many portable apps around that could be downloaded and run on local PCs. Usually running of exe could be blocked by using UAC. however, in this case of portable applications, how do I ...
0
votes
0answers
155 views

Protection against Bad USB not working for me

Protection against bad USB as described in this thread by user 10008 in the top voted answer is not working on my PC at the moment. I tried it when trying to install Ubuntu from a Live DVD to a USB ...
5
votes
2answers
2k views

How to check if my usb drives are vulnerable by BAD USB

Mark pointed out that only one chip type is vulnerable to BAD USB, id like to check if mine are, am using only Kingston flash drives here so can you tell me if they are, or if there exists a list ...
15
votes
4answers
10k views

Detecting Hardware keyloggers… elegant solutions?

My company recently discovered a hardware keylogger installed during an routine maintenance procedure. We tried catching the culprit but unfortunately it doesn't seem like we are going to be able to, ...
1
vote
0answers
372 views

Additional options to protect from bad USB devices in ubuntu

In addiition to the solution options in the other threads How to prevent BadUSB attacks on Linux desktop? https://security.stackexchange.com/questions/77072/protecting-against-bad-usb-in-ubuntu i ...
4
votes
0answers
451 views

Onboard Memory of USB HID Devices “hackable”?

I own some mice and keyboards for example my logitech G400 mouse and my razer deathstalker keyboard. Both of those devices have as far as i know built in memories to save DPI settings macros so on ...
1
vote
2answers
710 views

Bad USB and other Exploits of USB Devices

Can every USB device and most of the chips in other hardware be reprogrammed like it works with the Bad USB hack to inject malware into the operating system? For example i got a DVD burner that i ...
2
votes
2answers
1k views

How to create secure portable firefox?

When I need to access our school web portal I need to access it with my certificate (pfx). Since certificate needs to be installed in browser, I'm thinking (out of security reasons) to create a ...
1
vote
2answers
277 views

Moving /boot to USB and Preventing booting from other USB devices (Allow boot from only one USB)

I'm going to move my /boot/ folder to a USB to as a security measure to protect against Full Disk Encryption exploits. My question is, is it possible to only allow boot from USB from a single USB ...
3
votes
3answers
729 views

Risk when attacker has only physical access to a computer's USB port

Attacker has only access to USB port and can either attach a device or pen-drive to a computer, that can be on or off. Imagine a scenario where non-reliable people have access to offices, either ...
0
votes
2answers
3k views

Lock And Unlock Files Using USB Key

I am looking for a way to make a set of files only able to be read when a USB key is plugged into the system. For example, if I have FILE A on my C drive and I try to open it, it will say something ...
0
votes
1answer
2k views

How to identify which storage USB device is BadUSB-free at store?

Are there certain things I can look for when buying a new external hard drive or flash drives to ensure that the one I purchase does not contain BadUSB? Would popular commercial brands, such as ...
8
votes
3answers
5k views

Can a physical attacker compromise a Windows machine with UEFI, secure boot and bitlocker?

Machines such as the MS Surface Pro 3 comes with bitlocker encryption and UEFI secure boot out of the box. However, the default boot order is network -> usb -> ssd. If an attacker gets physical ...
2
votes
1answer
634 views

Securely erasing USB flash drives from a bootable media

My question refers to securely erasing viruses from the usb flash drives, including the MBR, in case there is one. I was thinking of booting with Linux from a closed CD-R (a cd rather than USB flash ...
0
votes
1answer
479 views

How secure are encrypted USB sticks really? [closed]

So I have read some articles (this being one https://nakedsecurity.sophos.com/2010/01/05/flash-drive-manufacturers-warn-hackers-decrypt-secure-usb-sticks/) that point out some flaws with certain ...
0
votes
1answer
1k views

Floppy disk partition showed up when USB Flash drive inserted

For one of my course's midterm lab portion, the professor provided us flash drives to put our project in. Everyone had their named labeled on one, so she gave me the last one left out, which had a ...
15
votes
6answers
3k views

Can the BadUSB exploit be prevented?

Recently I read a few things about the BadUSB exploit, for example: http://arstechnica.com/security/2014/07/this-thumbdrive-hacks-computers-badusb-exploit-makes-devices-turn-evil/ My understanding ...
7
votes
4answers
6k views

Is it possible to USB whitelist in Linux?

After watching Black Hat's presentation on the fundamental problems with USB "security", I'm wondering if there's a way to do USB whitelisting in Linux. Is there currently a mechanism that will allow ...
46
votes
7answers
25k views

How to prevent BadUSB attacks on Linux desktop?

What can I do to protect my Linux laptop from BadUSB attacks as described by ArsTechnica here? Perhaps writing an appropriate AppArmor profile would help?
3
votes
1answer
1k views

How difficult is the USB firmware attack? [closed]

Not really new but it's all over the news right now. You can hack a USB firmware to run an attack by emulating a keyboard. I wonder how difficult it is create an USB thumb that emulates a keyboard. ...
4
votes
2answers
491 views

Can the USB standard be altered to prevent the “firmware attack”? [duplicate]

Wired, and others are reporting on a research paper by Karsten Nohl and Jakob Lell. The paper apparently shows how any USB device (not just memory sticks) can be infected with malware at the firmware ...
1
vote
1answer
326 views

Anti-sniffer for USB [closed]

I'm looking for a Windows utility that can list all drivers, driver-filters, services, sniffers and other information for a selected USB port. I want to check if my "USB connection" is confidential.
31
votes
2answers
6k views

Can a connected USB device read all data from the USB bus?

Is it possible for a (malicious) (hardware) USB device to access all the data that is transferred through the USB bus and then read/store this information, essentially sniffing all transferred data? ...

1 2 3
4