Re:Don’t plug in that free Microsoft Office USB drive you go...
by toast0 on Saturday August 20, 2022 @03:09AM
(#32529928)
BadUSB or similar could be setup to work on DOS if the system firmware does USB keyboard mapping. You can do copy con foo.exe or something with debug, and then stream the executable you want to run, then run it. A bit more work, and there's no standard networking and all that, but it's doable if you really want it done; but you'd need a target to make it worthwhile.
[ Parent
| on HN ]
Re:Don’t plug in that free Microsoft Office USB drive you go...
by unnouinceput on Saturday August 20, 2022 @06:26AM
(#32530886)
Sooo... we go back to my initial point of a "badly configured system"?
Re:Don’t plug in that free Microsoft Office USB drive you go...
by toast0 on Saturday August 20, 2022 @11:53AM
(#32532939)
Well, most of my recent computers don't have an option for keyboards that's not USB. But a system with no inputs is probably the most secure you can get.
You can also hotglue unused ports and physically prevent unplugging the intended devices. But that's not realistic for most systems.