3 ms·
I always assume plugging in an untrusted USB to be security-suicide. At least on Windows it can run arbitrary code, by design. Given that, these bugs don't real
by _bxg1 6y ago
I always assume plugging in an untrusted USB to be security-suicide. At least on Windows it can run arbitrary code, by design. Given that, these bugs don't really affect my threat model at all.
- teknopaul 6y agoI'm pretty sure I dont have an evil maid. I do wince as my mate, who works as a binman, tests found devices on a Windows laptop. So far he has got is about a terrabyte of free storage and no problems.
- jfk13 6y ago> and no problems ...that he knows about.
- nsajko 6y agoIt's not just about software security, a simple USB device can fry its host (your computer). https://en.wikipedia.org/wiki/USB_Killer https://en.wikipedia.org/wiki/USB_Killer https://hackaday.com/2015/03/11/killer-usb-drive-is-designed-to-fry-laptops/ https://hackaday.com/2015/03/11/killer-usb-drive-is-designed... https://hackaday.com/2015/10/10/the-usb-killer-version-2-0/ https://hackaday.com/2015/10/10/the-usb-killer-version-2-0/