3 ms·
Safer how? On PC at least, SD card readers, both internal and external are attached via the USB protocol and are seen by the OS like mass storage devices, just
by ChuckNorris89 5y ago
Safer how? On PC at least, SD card readers, both internal and external are attached via the USB protocol and are seen by the OS like mass storage devices, just like USB drives, including being bootable, so whatever malware you have for a specific PC target, the payload should basically work the same from SD cards as via USB drives.
- redundantly 5y agoNyet. An SD card in a card slot can only be accessed as a mass storage device. A USB drive can act as a mass storage device as well as a keyboard and mouse and even contain an entire OS on it that could be remotely accessible via WiFi.
- ChuckNorris89 5y agoYou're right. My bad.
- cva 5y agofwiw, it is most definitely possible to build an sd card that can exfiltrate its own data over wifi. in fact, that was the entire point of the Eye-Fi[0] product (though not with any nefarious intent). though granted that's still a way smaller attack surface than what would be typically granted to a usb device. [0]: https://en.wikipedia.org/wiki/Eye-Fi https://en.wikipedia.org/wiki/Eye-Fi
- redundantly 5y agoI had forgotten entirely about Eye-Fi. Excellent point! When it comes to physical access, especially with shared physical devices, there's always going to be some type of attack vector, however small it may be.
- askvictor 5y agoSDIO would suggest otherwise, though I have no idea if Android supports it, and what drivers would hypothetically be required. Niche, but might be possible.
- lou1306 5y agoStill, it's probably much easier for an USB drive to actually pack malicious hardware in addition to software, like sensors (e.g., microphones) or an USB killer: https://en.wikipedia.org/wiki/USB_Killer https://en.wikipedia.org/wiki/USB_Killer