Unpatchable Malware That Infects USBs

Re:Unpatchable Malware That Infects USBs by Someone1234 on Thursday October 02, 2014 @12:14PM (#8401366)

I just have to add Sleep(60 minutes) to my fake HID device and it will bypass this. You cannot blackhole HID input for an hour.

[ Parent | on HN ]

Re:Unpatchable Malware That Infects USBs by Nacraile on Thursday October 02, 2014 @12:23PM (#8401440)

I'm not sure what that accomplishes. In order to provide input, the HID device must register itself with the OS, in order for the driver to be set up, etc. Sending HID messages without actually enumerating a HID device isn't going to work. Waiting 60 seconds to provide input doesn't change the fact that it has to tell the OS it can provide input in the first place. Yeah, it could wait 60 seconds to say "hey, a HID device just got plugged in", but that doesn't actually bypass the safety mechanism...

[ Parent | on HN ]

Re:Unpatchable Malware That Infects USBs by FreeFull on Friday October 03, 2014 @12:26AM (#8404313)

It can always tell the OS that it is a USB hub, so nothing precludes it from being seen as two USB devices (HID and storage)

[ Parent | on HN ]