Questions tagged [usb]
an industry standard used for connecting to and powering peripheral devices (keyboards, mice, cameras, printers, external hard drives, etc) from a computer or other USB capable device.
254
questions
3
votes
2
answers
6k
views
How to detect if files were saved or copied from an external hard drive/USB?
Is it possible? If so, how?
This is needed to alert on the copying of "important" files.
An example of what I need:
There is a document on an external hard drive/USB.
You're just allowed to ...
- 133
16
votes
4
answers
13k
views
Can I block viruses from a USB stick by scanning it before opening its folder?
I inserted my USB stick into a friend's PC which was full of viruses, malwares and adwares. Therefore I suppose they attacked my USB device as well. Now I want to use my USB device on my PC without ...
- 481
-2
votes
1
answer
396
views
How to isolate and identify a Trojan's machine code?
I believe that I have several USB drives infected with trojan(s). The memory sticks are data drives (not bootable). They appear to be carrying the binary code of a trojan in its inactive, ...
14
votes
2
answers
13k
views
Attacks via physical access to USB (DMA...?)
I wonder if USB can be exploited by someone with physical access to a reasonably secured computer. For example a kiosk, or a laptop attached to a desk.
Obviously, the boot sequence should be secure (...
- 311
2
votes
1
answer
691
views
Track USB activity on Windows
I want to know what happens in my USB Devices (file creation, file renamed, etc) without using an external tool.
I'm using Windows 7, can I enable some GPO to log these actions?
Here the event 4663 ...
- 41
0
votes
0
answers
549
views
Windows : security of USBNET / RNDIS
I'm having trouble finding documentation about how to setup any security for RNDIS or if the system is already secure enough.
For those who doesn't know RNDIS is a protocol that permits a USB ...
- 416
0
votes
0
answers
103
views
How can I prevent Ubuntu from automatically using an USB keyboard? [duplicate]
From what I understood, the possibility of having a multitude of device types connected to the computer via USB (keyboard, mouse, gadgets, sticks, webcams, ...) is a security risk:
I connect a USB ...
- 3,916
-1
votes
1
answer
658
views
Linux distribution on USB stick used to banking for begginers [closed]
Is it good idea to use up-to-date Linux on USB stick instead liveCD to online banking?
What is the best Linux distribution for not advanced people who commonly use Windows to make online payments ...
3
votes
2
answers
5k
views
After I've plugged my phone into a computer to upload photos, can people see the photos I did not upload even after I unplugged my phone?
I plugged my phone into a computer at work to upload photos using a USB, then unplugged it. I only uploaded the photos I needed, however, could they somehow see the photos I didn't upload on the ...
- 31
1
vote
1
answer
451
views
Given certain parameters, are there any risks with Android's USB Debugging?
Assuming:
You control access to an Android device
You never connect that Android device to a malware-infected system via a USB cable
Are there any risks with keeping USB Debugging always enabled on ...
- 3,134
1
vote
2
answers
699
views
Do USB flash drives delete a sector before writing to it?
I know that SSDs can't write to a non-empty sector, so must delete it first (and even support TRIM which resets them automatically after deletion). HDDs on the other, write to sectors before reseting ...
- 878
2
votes
0
answers
1k
views
USB Rubber Ducky Firmware Upgrade [closed]
I just erased my firmware, using dfu-programmer-0.7.2:
$ dfu-programmer at32uc3b1256 erase
Checking memory from 0x2000 to 0x3FFFF... Not blank at 0x2001.
Erasing flash... Success
Checking memory from ...
- 1,769
14
votes
5
answers
10k
views
Can autoplay USB stick spread virus to windows 8 or 10?
Autoplay was a security hole on older versions of Windows, but can I trust newer version like Windows 8 or 10 to insert USB stick without turning autoplay off?
- 1,388
33
votes
3
answers
10k
views
Can malware be transmitted via a USB charger plugged into a wall socket?
I have a smart phone that I often plug into a wall socket for charging via a small adapter that rectifies the AC to DC power and transforms the voltage from line (120V or 240V) to 5 V DC, probably ...
- 2,042
1
vote
1
answer
143
views
What local ethernet-accessible resources can be accessed on a PC through a USB cable?
Clarification: this is about scanning the network resources on computer B from computer A in a situation where:
Computer A is connected to Computer B through a USB cable
Computer A has some scanning ...
- 493
0
votes
0
answers
134
views
Encrypt a file before being copied
I am working on a program that will prevent data theft.
I want to encrypt every file that is being copied to an external drive before it is actually copied using a symmetric encryption.
Is it ...
- 127
6
votes
1
answer
298
views
Can USB host ports be dangerous in uncontrolled environments? Virus etc?
We have an Android device with 2 external USB host ports. Now I wonder what harm can be accomplished by an attacker with malicious intentions, provided that:
The user can not access settings or any ...
- 163
1
vote
1
answer
585
views
USB Modem risks
What are the risks associated with the use of portable USB modems, specifically uncontrolled BYOD USB modems as opposed to secure managed USB modems?
I plan on allowing multiple users to plug their ...
- 459
7
votes
2
answers
2k
views
A compromised USB
Assuming that a given USB drive is compromised(infected), what's the best way to deal with it? I mean, obviously, the solution is to nuke(format) the drive. But for that, the device needs to be ...
- 613
5
votes
3
answers
2k
views
BadUSB: Why are firmware writeable in the first place? Manufacturer's backdoor?
How many of you have actually updated their mouse, keyboard or USB stick firmware? How many vendor actually propose updates for such devices?
However these devices firmware often offer a proprietary ...
- 19.2k
7
votes
0
answers
326
views
Windows 10 installaton USBs sold by Microsoft [closed]
With the recent release of Microsoft's Windows 10, I dropped by a local Microsoft store to purchase a windows 10 installation media.
To my surprise (somewhat) the employees said that they do not ...
- 79
2
votes
2
answers
4k
views
BAD USB attack possible while screen is locked?
If i leave my screen locked and someone sticks in a thumbdrive that was manipulated using the bad USB exploit would an attack be possible?
0
votes
2
answers
953
views
Content on a usb flash drive available for a limited time [closed]
I need to distribute some content on a USB flash drive. This content should be available for a limited time only.
I am looking for some approach to achieve above.
So far I do not have information ...
- 109
4
votes
3
answers
2k
views
Server based pdf signing using etoken from a client browser
I have a requirement where a PDF document is generated on the application server in a web based .Net application and the same is digitally signed and mailed to the recepient. The signing and mail ...
- 41
0
votes
0
answers
86
views
Is there a pre-established method for cracking RSA SecureID codes?
I am using the most modern version of RSA SecureID's tokens with a RSA server (used with a lot of governments and larger organizations ). I was just wondering if there was a pre-established method for ...
8
votes
2
answers
2k
views
Hardware devices for protecting against BadUSB?
Have any devices been released which protect against BadUSB attacks?
I'm particularly interested in buying a USB hub which has the following protections:
The USB hub itself won't allow reflashing ...
- 6,753
1
vote
1
answer
505
views
Identifying USB Device Anomalies..? [closed]
I have a laptop with 4 USB ports, and I have an external 4 port splitter that I purchased off amazon. Plugged into that is an external USB audio card. The audio card has a line-in port and an audio ...
- 73
4
votes
1
answer
1k
views
How to check whether my USB flash drive was infected by the BadUSB
After failing to check whether my USB stick firmware can be rewritten AT ALL, I want find out, whether it WAS rewritten when I sticked it in another computer. In particular the question is: how to ...
- 353
21
votes
1
answer
12k
views
How to check if my USB stick firmware can be rewritten via the USB port?
How can I know in Linux (or otherwise), if the firmware of my USB flash drive can be rewritten using the USB port (when sticking it in an USB port)? Eg. for a cheap EMTEC 16GB.
I was thinking about ...
- 353
11
votes
3
answers
2k
views
Disable USB keyboard pluggability on MacBook
I'm concerned about USB devices being physically attached to my MacBook laptop when I am about to unlock my computer or while my computer is unlocked.
My threat model involves an attacker who is ...
- 213
3
votes
2
answers
530
views
Questions regarding Bad USB exploit
I own a Netbook and my external DVD Drive is possibly infected with Bad USB.
If I install Ubuntu using this infected DVD drive, could my system be taken over during installation process or later when ...
1
vote
1
answer
196
views
How to protect against portable applications
There are many portable apps around that could be downloaded and run on local PCs.
Usually running of exe could be blocked by using UAC. however, in this case of portable applications, how do I ...
- 715
0
votes
0
answers
196
views
Protection against Bad USB not working for me
Protection against bad USB as described in this thread by user 10008 in the top voted answer is not working on my PC at the moment.
I tried it when trying to install Ubuntu from a Live DVD to a USB ...
5
votes
2
answers
3k
views
How to check if my usb drives are vulnerable by BAD USB
Mark pointed out that only one chip type is vulnerable to BAD USB, id like to check if mine are, am using only Kingston flash drives here so can you tell me if they are, or if there exists a list ...
16
votes
4
answers
12k
views
Detecting Hardware keyloggers... elegant solutions?
My company recently discovered a hardware keylogger installed during an routine maintenance procedure.
We tried catching the culprit but unfortunately it doesn't seem like we are going to be able to, ...
- 161
1
vote
0
answers
456
views
Additional options to protect from bad USB devices in ubuntu
In addiition to the solution options in the other threads
How to prevent BadUSB attacks on Linux desktop?
https://security.stackexchange.com/questions/77072/protecting-against-bad-usb-in-ubuntu
i ...
4
votes
0
answers
605
views
Onboard Memory of USB HID Devices "hackable"?
I own some mice and keyboards for example my logitech G400 mouse and my razer deathstalker keyboard.
Both of those devices have as far as i know built in memories to save DPI settings macros so on ...
1
vote
2
answers
929
views
Bad USB and other Exploits of USB Devices
Can every USB device and most of the chips in other hardware be reprogrammed like it works with the Bad USB hack to inject malware into the operating system?
For example i got a DVD burner that i ...
- 11
2
votes
2
answers
2k
views
How to create secure portable firefox?
When I need to access our school web portal I need to access it with my certificate (pfx). Since certificate needs to be installed in browser, I'm thinking (out of security reasons) to create a ...
- 21
1
vote
2
answers
334
views
Moving /boot to USB and Preventing booting from other USB devices (Allow boot from only one USB)
I'm going to move my /boot/ folder to a USB to as a security measure to protect against Full Disk Encryption exploits. My question is, is it possible to only allow boot from USB from a single USB ...
- 61
3
votes
3
answers
846
views
Risk when attacker has only physical access to a computer's USB port
Attacker has only access to USB port and can either attach a device or pen-drive to a computer, that can be on or off. Imagine a scenario where non-reliable people have access to offices, either ...
- 1,881
0
votes
2
answers
4k
views
Lock And Unlock Files Using USB Key
I am looking for a way to make a set of files only able to be read when a USB key is plugged into the system. For example, if I have FILE A on my C drive and I try to open it, it will say something ...
user61462
0
votes
1
answer
2k
views
How to identify which storage USB device is BadUSB-free at store?
Are there certain things I can look for when buying a new external hard drive or flash drives to ensure that the one I purchase does not contain BadUSB? Would popular commercial brands, such as ...
- 107
11
votes
3
answers
8k
views
Can a physical attacker compromise a Windows machine with UEFI, secure boot and bitlocker?
Machines such as the MS Surface Pro 3 comes with bitlocker encryption and UEFI secure boot out of the box. However, the default boot order is network -> usb -> ssd.
If an attacker gets physical ...
- 456
2
votes
1
answer
943
views
Securely erasing USB flash drives from a bootable media
My question refers to securely erasing viruses from the usb flash drives, including the MBR, in case there is one.
I was thinking of booting with Linux from a closed CD-R
(a cd rather than USB flash ...
- 21
0
votes
1
answer
558
views
How secure are encrypted USB sticks really? [closed]
So I have read some articles (this being one https://nakedsecurity.sophos.com/2010/01/05/flash-drive-manufacturers-warn-hackers-decrypt-secure-usb-sticks/) that point out some flaws with certain ...
- 1,489
0
votes
1
answer
2k
views
Floppy disk partition showed up when USB Flash drive inserted
For one of my course's midterm lab portion, the professor provided us flash drives to put our project in. Everyone had their named labeled on one, so she gave me the last one left out, which had a ...
- 107
14
votes
6
answers
3k
views
Can the BadUSB exploit be prevented?
Recently I read a few things about the BadUSB exploit, for example:
http://arstechnica.com/security/2014/07/this-thumbdrive-hacks-computers-badusb-exploit-makes-devices-turn-evil/
My understanding ...
- 141
9
votes
4
answers
10k
views
Is it possible to USB whitelist in Linux?
After watching Black Hat's presentation on the fundamental problems with USB "security", I'm wondering if there's a way to do USB whitelisting in Linux.
Is there currently a mechanism that will allow ...
- 6,753
51
votes
7
answers
30k
views
How to prevent BadUSB attacks on Linux desktop?
What can I do to protect my Linux laptop from BadUSB attacks as described by ArsTechnica here?
Perhaps writing an appropriate AppArmor profile would help?
- 1,453