No one, not even the Secret Service, should randomly plug in a strange USB stick

Re:No one, not even the Secret Service, should randomly plug... by depressed on Monday April 08, 2019 @07:43PM (#19610270)

Shouldn't preventing this be as easy as turning off autorun? In fact, I thought Windows had that off by default for USB devices.

(Of course, I'm assuming we're not dealing with a zero-day in the USB stack or filesystem drivers. But that probably is something that the Secret Service should be on top of, as well.)

[ Parent | on HN ]

Re:No one, not even the Secret Service, should randomly plug... by analog31 on Monday April 08, 2019 @08:04PM (#19610387)

Good question. As I understand it, the USB stick can present itself as a keyboard, which is automatically mounted, and begins entering a series of keystrokes that program the system to compromise itself.

In essence, modern OS's give "autorun" privilege to keyboards and mice. That's the HID in this discussion -- Human Interface Device.

[ Parent | on HN ]

Re:No one, not even the Secret Service, should randomly plug... by depressed on Tuesday April 09, 2019 @01:29AM (#19612046)

Aha, I missed that piece of the puzzle. Thank you.

[ Parent | on HN ]

Re:No one, not even the Secret Service, should randomly plug... by darkarmani on Monday April 08, 2019 @10:29PM (#19611204)

> this be as easy as turning off autorun

What does autorun have to do with a mouse or keyboard device? The problem with USB is that you don't know if it is a "mass storage device" or any of the other kinds of devices that can start interfacing with your computer.

If it is an (automated) keyboard device (HID), it will immediately start "typing" which means it can open a terminal window and start executing things.

[ Parent | on HN ]