3 ms·

What's stopping the forensic people from just spoofing the USB device IDs?

• topspin 6y ago
  Nothing. And that's not the problem this program is intended to solve.
  • nialv7 6y ago
    It is. The program tries to prevent use of unauthorized USB devices, yet it uses the easily spoofed USB device IDs to authenticate them.
    • deleted 6y ago
      [deleted]
    • topspin 6y ago
      It isn't. The problem this program solves is thwarting a naive attempt to alter the state of the USB bus. The design assumes the attacker is not aware of the consequences of adding or removing devices and has no reason to employ spoofed devices or any other Ever Greater Adversary Regression techniques you can imagine.
      • nialv7 6y ago
        After they got bitten but tools like this usbkill once, ID spoofing will just become the standard practice, and it will be made so easy to do they don't even need to think.
• deadbunny 6y ago
  How do they get the IDs?
  • nialv7 6y ago
    They could just look around and see what USB devices you own. USB vendor/product IDs are not secret.
    • refurb 6y ago
      No doubt if the govt got burned by one of these, they’d pretty quickly approach it differently. Security through (counter-measure) obscurity.