4 ms·
> You could quite easily hide a USB mass storage device inside a mouse AFAIK one could mitigate something like this by really restrictive udev rules only allow
by leni536 10y ago
> You could quite easily hide a USB mass storage device inside a mouse
AFAIK one could mitigate something like this by really restrictive udev rules only allowing certain usb drivers on certain usb ports (like no usb msc on the port dedicated for keyboard only).
- pjc50 10y agoYou can mitigate the exploit against standard mass storage drivers, yes, but there are other ways. It appears in this case the host was compromised (so able to override the drivers). If a userland program can get at the raw HID interface, that can also be used for exfiltration to a tailored device.
- kps 10y agoxset led named 'Scroll Lock' Slow, but works for PS/2 keyboards too.
- jandrese 10y agoDepends on having a camera pointed that the compromised keyboard, and cameras are the first things banned when setting up a secure environment.
- kps 10y agoI meant, using a physically compromised keyboard that records LED transitions set by the host, since the context was USB devices that look like normal keyboard or mice but actually contain storage.
- jandrese 10y agoThe only problem with that is people don't typically carry keyboards around and plug them into different devices.
- TheCapn 10y agoPersonally? PC gets locked in a box with some sort of venting. Keyboard / Mouse are plugged in by IT and no one unauthorized has physical access to the PC itself. If they're serious enough about finding 0 days and exploits to the USB or OS to load this shit any physical access to the box itself is off limits.
- redcalx 10y agoCut USB cable; splice new device into cable. Or, open mouse/keyboard case, wire device into USB bus connections.
- acdha 10y agoThis is why you need defense in depth: physical seals on components, either protecting cables or keeping them clearly visible where someone can notice tampering, and – above all – having the physical space setup to strictly limit someone's ability to bring arbitrary objects in or spend time alone with sensitive hardware. Consider what someone with the time, skill, and access to do that could also do without that: opening the case and directly installing some sort of device, planting a camera which records you typing passwords in (“oops, left my cellphone sitting out. Won't happen again!”), planting a radio receiver which opens up all sorts of side channel attacks, installing a passive network tap, etc. A guard with a metal detector and strict limits on what you can bring into the building or what tools you can use inside is going to do a better job preventing all of those.
- dewyatt 10y agoWireless RF keyboard+mouse, external antennas outside of the shielded case?
- TeMPOraL 10y agoCan be defeated by a phone charger. http://samy.pl/keysweeper/ http://samy.pl/keysweeper/
- 10y ago