4 ms·

I'm cool with HIDs being installed, but an Ethernet device that hijacks my entire network and then quietly disappears? Uh... I'd notice a new usb plugged in, b

• mnw21cam 10y ago
  I believe there is a proof of concept evil USB device that looks like a USB key, but actually emulates a keyboard and enters all sorts of damaging keystrokes when plugged in. So allowing keyboards is dangerous anyway (although having the screen locked should help). This is the reason why keyboard/mouse connectors should look different to USB connectors, so we can tell the difference.
  • jerf 10y ago
    Screen locking would fix the keyboard attack. It has no input coming back from the computer so it works by blind-spraying keypresses in and hoping.
    • mic159 10y ago
      The numlock and capslock indicators can be used as confirmation signals coming back so it knows if it is working.
      • jerf 10y ago
        Not really. By the time you make those signals provide feedback about your task rather than just whether Caps Lock is on, you'll have already accomplished your task and be into the part of the process where you're trying to download or compile some hack to use code to send something useful along Caps Lock signals. It's not a useful feedback mechanism when getting the feedback is an order of magnitude or two harder than the task you're trying to perform in the first place.
  • andresgottlieb 10y ago
    https://github.com/hak5darren/USB-Rubber-Ducky/wiki https://github.com/hak5darren/USB-Rubber-Ducky/wiki
  • deleted 10y ago
    [deleted]