4 ms·
Could this be taken care of at the computer end instead, having the computer not automatically run things from a drive? It seems to me like the natural way to r
by Bromskloss 9y ago
Could this be taken care of at the computer end instead, having the computer not automatically run things from a drive? It seems to me like the natural way to resolve the problem.
- acdha 9y agoThe drive itself can be running code. That could hide malware until some trigger event, allow you to write a file which will be concealed, etc.
- oarsinsync 9y agoThe drive might not be a drive but actually a program presenting as a keyboard that waits for a sufficient period of inactivity before performing a series of keypresses that runs arbitrary code and exfiltrates data off the back of that. Not to mention lower level exploits that exist for USB.
- closeparen 9y agoUSB devices get to move the mouse pointer, click, and send keystrokes.
- Bromskloss 9y agoIt's up to the host to heed such commands, right?
- imtringued 9y agoHow do you "pair" a bluethooth keyboard if you haven't plugged in a normal keyboard?
- Bromskloss 9y agoInstall OS, plug in keyboard and mouse, turn off the automatic acceptance of any new such devices. Alternatively, have the driver require that keyboards verify themselves with a digital signature from a trusted source.