What are malicious USB keys and how to create a realistic one?

Re:What are malicious USB keys and how to create a realistic... by greggman on Wednesday October 12, 2016 @11:40PM (#12698269)

This might be a dumb question but wouldn't one solution to the HID-based attack be for the OS to ask the user for permission to allow the new keyboard? As in "New Keyboard Detected: Allow? Y/N" That wouldn't protect against driver 0 days but hey, one step at a time.

Do any OSes have an option to ask the user if connection is ok before allowing it?

[ Parent | on HN ]

Re:What are malicious USB keys and how to create a realistic... by Benjammer on Thursday October 13, 2016 @01:06AM (#12698578)

What if it's the first HID you connect? How do you confirm?

[ Parent | on HN ]

Re:What are malicious USB keys and how to create a realistic... by liotier on Thursday October 13, 2016 @03:50AM (#12699175)

Whitelist if present at logon and confirm if inserted later ?

[ Parent | on HN ]

Re:What are malicious USB keys and how to create a realistic... by jagermo on Thursday October 13, 2016 @01:24AM (#12698646)

I don't know about OSes, but some security solutions do exactly that.

[ Parent | on HN ]

Re:What are malicious USB keys and how to create a realistic... by schoen on Wednesday October 12, 2016 @11:55PM (#12698305)

Tails does something like this!

[ Parent | on HN ]