2 ms·
Can you re-write a USB thumb drive's firmware, over USB? the only reference to that I saw in the article was that it can "spread from USB to PC and back" which
by hamiltonkibbe 12y ago
Can you re-write a USB thumb drive's firmware, over USB? the only reference to that I saw in the article was that it can "spread from USB to PC and back" which is kind of vague. Is there a specific vulnerability on a specific chipset that is exploited?
I understand the point that USB drives are more, well, promiscuous than other bus hardware, but saying "A thumbdrive with modified firmware can affect a computer it is plugged in to" and equating that with "USB security is fundamentally broken" seems like a bit of a reach. i.e. there is no specific provision in the USB protocol for re-flashing device/USB stack firmware. I think "Certain USB thumbdrive chipsets are vulnerable to a specific exploit that allows the USB host to modify the thumb drive's firmware" is a much more accurate headline, given the content of the article. Right now it is no different than saying "I got a virus over email, therefore Ethernet is fundamentally broken"