3 ms·
Is it still true that USB devices can be used to execute code on a target's system without user interaction? I thought this behavior disappeared ~10 years ago.
by blhack 9y ago
Is it still true that USB devices can be used to execute code on a target's system without user interaction?
I thought this behavior disappeared ~10 years ago.
- IshKebab 9y agoThey shouldn't be able to. Firewire devices can because they used DMA without memory protection. I don't think Thunderbolt has the same flaw. However there are bugs in USB stacks, especially now you can do so many alternate protocols over USB-C. https://www.jefftk.com/p/malicious-usb-sticks https://www.jefftk.com/p/malicious-usb-sticks There's nothing fundamental in the USB spec that lets devices execute code on the host.