News for hackers. Stuff that matters.

A comment on What are malicious USB keys and how to create a realistic one?. Parent comment

Re:What are malicious USB keys and how to create a realistic... by jpindar on Wednesday October 12, 2016 @02:47PM (#12695489)
Plug it in a Raspberry Pi that's not connected to a network. After you're done, destroy the Pi's SD card.
[ Parent | on HN ]
Re:What are malicious USB keys and how to create a realistic... by sean2 on Wednesday October 12, 2016 @06:59PM (#12697045)
Put the SD card in Read only mode. Save yourself $10.
[ Parent | on HN ]
Re:What are malicious USB keys and how to create a realistic... by marcosdumay on Wednesday October 12, 2016 @07:32PM (#12697234)
Not enough by a far margin.

There's a computer inside that SSD that reads a soft signal to decide if writing is enabled or not. More often than not its firmware is full of known bugs.

[ Parent | on HN ]
Re:What are malicious USB keys and how to create a realistic... by colejohnson66 on Wednesday October 12, 2016 @09:14PM (#12697670)
Correct me if I'm wrong, but that's because SD cards are half duplex, right? So there's no way to disable writing through a "disconnect pins x and y" because those pins are needed for reading.
[ Parent | on HN ]
Re:What are malicious USB keys and how to create a realistic... by paulannesley on Thursday October 13, 2016 @12:49AM (#12698498)
SD cards implement a simple four-pin mode (SPI) for which there's public documentation, and a proprietary mode parallelizing data over more pins. I know more about the former than the latter, but it's probably a similar situation.

SPI is full duplex; it has a dedicated line per data direction (MISO and MOSI), however the same lines are used for commands and data. So with MOSI (master out, slave in) physically disconnected, it'd be impossible to send the command asking to read data, even though that data would be delivered on the separate MISO (master in, slave out) line.

[ Parent | on HN ]
Re:What are malicious USB keys and how to create a realistic... by liotier on Thursday October 13, 2016 @03:52AM (#12699187)
> After you're done, destroy the Pi's SD card.

Or sell it on eBay...

[ Parent | on HN ]
Re:What are malicious USB keys and how to create a realistic... by j3097736 on Wednesday October 12, 2016 @03:37PM (#12695848)
>destroy the Pi's SD card.

Don't forget to use tinfoil gloves and hat while you eject it

[ Parent | on HN ]