News for hackers. Stuff that matters.

A comment on What are malicious USB keys and how to create a realistic one?.

Re:What are malicious USB keys and how to create a realistic... by Palomides on Wednesday October 12, 2016 @11:34AM (#12693781)
It's interesting to see mention of 0-days against USB drivers as a vector, says "AFAIK, none of those have been publicly discussed." It seems very likely there are vulnerable drivers.
[ Parent | on HN ]
Re:What are malicious USB keys and how to create a realistic... by blockoperation on Wednesday October 12, 2016 @11:55AM (#12693972)
Block layer or filesystem driver vulnerabilities would be even better – no special hardware needed. Just buy a load of cheap flash drives, copy over your malicious partition table or filesystem, and you're set.
[ Parent | on HN ]
Re:What are malicious USB keys and how to create a realistic... by Palomides on Wednesday October 12, 2016 @11:59AM (#12694007)
that seems a little optimistic, I figure there must be some moderately obscure device drivers that get much less scrutiny.
[ Parent | on HN ]
Re:What are malicious USB keys and how to create a realistic... by Kalium on Wednesday October 12, 2016 @04:33PM (#12696224)
I suspect a lot of machines still have old floppy disk drivers...
[ Parent | on HN ]