Usbkill – anti-forensic tool to halt computer when new USB device is connected

Re:Usbkill – anti-forensic tool to halt computer when new US... by waldfee on Thursday August 06, 2020 @06:50AM (#24069783)

If you are paranoid about something like this happening, just use https://www.qubes-os.org/. all usb devices are jailed in a non-networked vm by default.

In general, if what you do warrants that level of paranoia, qubes will help you massively.

Micah Lee held a great overview talk at HOPE 2018: https://www.youtube.com/watch?v=f4U8YbXKwog

[ Parent | on HN ]

Re:Usbkill – anti-forensic tool to halt computer when new US... by czechdeveloper on Thursday August 06, 2020 @07:34AM (#24070028)

I don't think it solves same problem.

[ Parent | on HN ]

Re:Usbkill – anti-forensic tool to halt computer when new US... by waldfee on Thursday August 06, 2020 @07:54AM (#24070129)

it does not solve the same problem, correct. it's still a great tool if your threat model warrants it.

[ Parent | on HN ]

Re:Usbkill – anti-forensic tool to halt computer when new US... by portpecos on Thursday August 06, 2020 @01:53PM (#24073556)

Can you give an example of a threat model that would warrant it?

[ Parent | on HN ]

Re:Usbkill – anti-forensic tool to halt computer when new US... by smogcutter on Thursday August 06, 2020 @05:44PM (#24075804)

You’re a journalist. Source gives you a usb drive full of documents. Source is in reality hostile/compromised, so is the usb drive.

[ Parent | on HN ]

Re:Usbkill – anti-forensic tool to halt computer when new US... by kawsper on Thursday August 06, 2020 @07:33AM (#24070027)

How does that work with input devices like keyboard and mouse?

[ Parent | on HN ]

Re:Usbkill – anti-forensic tool to halt computer when new US... by waldfee on Thursday August 06, 2020 @07:53AM (#24070116)

generally it is advised to use ps2 input (like most laptop's integrated keyboard and touchpad).

details on using usb keyboard and mouse here: https://www.qubes-os.org/doc/usb-qubes/

[ Parent | on HN ]