News for hackers. Stuff that matters.

A comment on What are malicious USB keys and how to create a realistic one?. Parent comment

Re:What are malicious USB keys and how to create a realistic... by throwaway2016a on Wednesday October 12, 2016 @05:17PM (#12696482)
To whomever down-voted me: will that not work? I know on my system at least I can tell it to prompt me when a new USB device is inserted to mount it to the VM directly. In which case key presses would go to the VM. So as long as it doesn't issue a key sequence to escape keyboard capture all key presses should go to the VM... or am I missing something?
[ Parent | on HN ]
Re:What are malicious USB keys and how to create a realistic... by detaro on Wednesday October 12, 2016 @05:20PM (#12696507)
If you plug a keyboard in your system the system doesn't take key presses from it until you've confirmed what to do with it? That's at least an unusual configuration. Otherwise it could run the malicious sequence before you had time to switch the connection to the VM.
[ Parent | on HN ]
Re:What are malicious USB keys and how to create a realistic... by ThatPlayer on Wednesday October 12, 2016 @09:34PM (#12697746)
One way around that would be to passthrough the entire USB controller.
[ Parent | on HN ]
Re:What are malicious USB keys and how to create a realistic... by Viper007Bond on Wednesday October 12, 2016 @08:42PM (#12697528)
You're missing that 0-days and other stuff can get around that.

Or even just the USB killers that use capacitors to fry your motherboard.

[ Parent | on HN ]