No one, not even the Secret Service, should randomly plug in a strange USB stick

Re:No one, not even the Secret Service, should randomly plug... by auslander on Monday April 08, 2019 @10:48PM (#19611308)

> USB device that appears as a storage medium, yet contains a transmitter which slowly exfiltrates any data written

I won't copy my data on unknown device. Mics and cameras trigger prompts in MacOS. The keyboard device on the other hand, can be used for 5 seconds walk by attack, running install scripts (Bad USB) attack.

[ Parent | on HN ]

Re:No one, not even the Secret Service, should randomly plug... by 01100011 on Tuesday April 09, 2019 @05:19AM (#19612979)

> I won't copy my data on unknown device.

You won't, but many people will. They'll plug it in, figure the device is fine, and begin to trust it.

Mics and cameras trigger prompts if they present themselves as USB devices. I'm saying they do not need to do that. They can draw power from the port and send captured data out wirelessly.

[ Parent | on HN ]

Re:No one, not even the Secret Service, should randomly plug... by inetknght on Tuesday April 09, 2019 @08:35AM (#19613932)

> Mics and cameras trigger prompts in MacOS.

That's assuming it presents itself as a mic or camera. What's to say it can't have the hardware embedded in the device but not present it to the host machine? Then any exfiltration technique can get a direct look into audio/video of the area.

[ Parent | on HN ]