4 ms·
I don't think these threats are equivalent. You can detect a rubber ducky doing it's thing if you look at the screen, and the rubber ducky requires your pc to b
by ATsch 10y ago
I don't think these threats are equivalent. You can detect a rubber ducky doing it's thing if you look at the screen, and the rubber ducky requires your pc to be unlocked, so you can easily defend against a rubber ducky by not leaving the PC unlocked.
With direct hardware access/DMA you can just plug a small device into, let's say a locked office cubicle computer and compromize/siphon data off it that way.
- lsaferite 10y agoConsidering the speed with which that attack can happen and that the macros can background the entire processing immediately (opens cmd, creates bat, executes bat, minimizes cmd), you only have to turn your back for a few seconds and an attacker can get into your system. Imagine, you are sitting at your desk in the county clerk office and a citizen comes to see you about something. You turn your chair around for a few seconds to get a file and they insert the drive into the back of your computer and remove it before you turn back around. Do you honestly think that anyone beyond a security export or a spook would think they could be compromised that fast?