4 ms·
99% of "disabled" usb ports aren't. Keyboards and mice still work, which means there remains a path to be exploited.
by sandworm101 2y ago
99% of "disabled" usb ports aren't. Keyboards and mice still work, which means there remains a path to be exploited.
- sandos 2y agoYeah,I was going to point out that a software block is unlikely to help against bad-usb stuff that infects the USb firmware?
- Sebb767 2y agoDepends. It won't help against exploitative firmware or shocker devices, but most USB exploits don't come with zero-day firmware exploits or even require user interaction, which this policy will prevent. Additionaly, even when attacked with such extreme measures, most users won't try to plug in planted, potentially malicious USB devices if they don't expect them to work.
- dotancohen 2y agoActually, the attack of leaving a USB drive forgotten in the parking lot has proven time and time again to be extraordinarily effective.
- khafra 2y agoIn organizations where only HID USB devices are allowed, not mass storage? I'm not aware of any reported successes in that environment, although it's theoretically possible (Heck, you could even have your evil HID-presenting SOC USB stick open a command prompt and type in the malware if it detects a long enough lapse in input without an obvious screen lock command).
- Sebb767 2y agoIt is, but if your organization completely forbids any non-HID USB devices, users are less likely to try their found USB stick on a company PC, since they don't expect it to work anyway.
- sumo89 2y agoPs/2 superiority!
- almostnormal 2y agoEven a malicious ps/2 keyboard could run any command it desires automatically.
- cduzz 2y agoI'm pretty sure I wouldn't use a PS2 keyboard or mouse that's been through the NSA fulfillment warehouse.
- EasyMark 2y agoBut it still cuts down on attack surface, no? Most USB hacks are via ignorant employees plugging in compromised usb drives/devices or am I missing something here? The hot glue is a significant reminder that you add “you can be fired for misusing company computers” to the company employee manual