Free Republic
Browse · Search
News/Activism
Topics · Post Article

Skip to comments.

Researchers discover way to create trojans in USB hardware
Tech 1984 ^ | 7/6/2010 | Tech 1984

Posted on 07/06/2010 3:36:38 PM PDT by oc-flyfish

Wonderful, just one more way for our benevolent federal government to spy on us.


TOPICS: Crime/Corruption; Government; News/Current Events; Technical
KEYWORDS: hacker; trojan; usb

1 posted on 07/06/2010 3:36:44 PM PDT by oc-flyfish
[ Post Reply | Private Reply | View Replies]

To: ShadowAce; bamahead

fyi


2 posted on 07/06/2010 3:40:10 PM PDT by rabscuttle385 (Live Free or Die)
[ Post Reply | Private Reply | To 1 | View Replies]

To: oc-flyfish

Hey, I just sent in my donation to FR. You should do the same thing too!


3 posted on 07/06/2010 3:40:26 PM PDT by oc-flyfish
[ Post Reply | Private Reply | To 1 | View Replies]

To: oc-flyfish

And what do we get if we donate? A FR cap?


4 posted on 07/06/2010 3:46:03 PM PDT by Soothesayer9
[ Post Reply | Private Reply | To 3 | View Replies]

To: oc-flyfish

I know an It guy (really great) who cleans my puter every so often.

He said I had some really bad stuff on it this time.
Do you know anything about a trojan called BHO-AM? I get hit every morning around 4:30.

It is really PMO.


5 posted on 07/06/2010 3:47:53 PM PDT by Marty62 (marty60)
[ Post Reply | Private Reply | To 1 | View Replies]

To: oc-flyfish

I wonder if this is unique to Windows systems...the article doesn’t say.


6 posted on 07/06/2010 3:48:03 PM PDT by bigbob
[ Post Reply | Private Reply | To 1 | View Replies]

To: Soothesayer9

The ability to keep FR online for another 3 months. :-)


7 posted on 07/06/2010 3:48:08 PM PDT by oc-flyfish
[ Post Reply | Private Reply | To 4 | View Replies]

To: bigbob

The article does not say. I think it would work across systems but the trojan would have to be written to “understand” the system calls used by a Mac, versus Linux, versus Windows.


8 posted on 07/06/2010 3:50:03 PM PDT by oc-flyfish
[ Post Reply | Private Reply | To 6 | View Replies]

To: Marty62

Gee, I have the same BHO one as well! I hear it self destructs in 2012.


9 posted on 07/06/2010 3:50:50 PM PDT by oc-flyfish
[ Post Reply | Private Reply | To 5 | View Replies]

To: oc-flyfish
Let's no forget Red China.Just about every USB drive is made either in Taiwan or Red China itself.And The Chicoms certainly have enough operatives in Taiwan so that their units would be suspect as well.
10 posted on 07/06/2010 3:52:01 PM PDT by Gay State Conservative (''I don't regret setting bombs,I feel we didn't do enough.'' ->Bill Ayers,Hussein's mentor,9/11/01)
[ Post Reply | Private Reply | To 1 | View Replies]

To: oc-flyfish

OK!:)


11 posted on 07/06/2010 3:56:00 PM PDT by Marty62 (marty60)
[ Post Reply | Private Reply | To 9 | View Replies]

To: oc-flyfish

I cleaned my USB drive, but after I got it out of the dryer, it no longer worked.


12 posted on 07/06/2010 3:57:57 PM PDT by UCANSEE2 (The Last Boy Scout)
[ Post Reply | Private Reply | To 1 | View Replies]

To: Gay State Conservative

>>Let’s no forget Red China.

Hey, I know... let’s outsource the manufacturing of vlsi chips critical to economic and military industrial infrastructures to our “former” enemies and current competitors. What could possibly go wrong?


13 posted on 07/06/2010 4:27:05 PM PDT by LomanBill (Animals! The DemocRats blew up the windmill with an Acorn!)
[ Post Reply | Private Reply | To 10 | View Replies]

To: Soothesayer9; oc-flyfish; All
"And what do we get if we donate? A FR cap?"

"The ability to keep FR online for another 3 months. :-)"

...and quite possibly........

Photobucket

14 posted on 07/06/2010 4:35:01 PM PDT by musicman (Until I see the REAL Long Form Vault BC, he's just "PRES__ENT" Obama = Without "ID")
[ Post Reply | Private Reply | To 4 | View Replies]

To: oc-flyfish
Here's the referenced article:

http://tarpit.rmc.ca/leblanc/Research/Clark_Leblanc_Knight-HW_Trojan_Horse_Unintended_USB_Channels.pdf

Bah.

15 posted on 07/06/2010 5:02:59 PM PDT by TChad
[ Post Reply | Private Reply | To 1 | View Replies]

To: rdb3; Calvinist_Dark_Lord; GodGunsandGuts; CyberCowboy777; Salo; Bobsat; JosephW; ...

16 posted on 07/06/2010 5:28:08 PM PDT by ShadowAce (Linux -- The Ultimate Windows Service Pack)
[ Post Reply | Private Reply | To 1 | View Replies]

To: musicman
Obama BS decoder?? You mean this:


17 posted on 07/06/2010 5:44:01 PM PDT by Still Thinking (Freedom is NOT a loophole!)
[ Post Reply | Private Reply | To 14 | View Replies]

To: Soothesayer9
no, the knowledge you're no longer a freeloader...
18 posted on 07/06/2010 5:47:20 PM PDT by Chode (American Hedonist *DTOM* -ww- NO Pity for the LAZY)
[ Post Reply | Private Reply | To 4 | View Replies]

To: Still Thinking
Muttley Laugh
19 posted on 07/06/2010 6:14:48 PM PDT by musicman (Until I see the REAL Long Form Vault BC, he's just "PRES__ENT" Obama = Without "ID")
[ Post Reply | Private Reply | To 17 | View Replies]

To: TChad
Thanks for the link.

From the penultimate (and it should have been a lot closer to the front of the paper) page:

3.4.1. Observability. Someone with direct observation of compromise a network endpoint, without attempting access the network endpoint would be able to notice the uploading through the network. of applications, as the text entered by the Hardware Trojan Horse device would appear on the display as text being entered by the keyboard. A user at the network endpoint could also disrupt the uploading of the applications because any characters entered on the legitimate keyboard would be passed to the file containing the uploaded application.

I skimmed the paper, and I believe that a short summary is that a USB keyboard can be programmed to capture keystrokes and also can be setup to automatically type commands that can lead to compromise of data stored the system.

(There's a whole elaborate bit about using audio and keyboard LEDs that I fail to see much use for, but I didn't spend a great deal of time with this paper since the overall attack doesn't seem very covert.)

20 posted on 07/06/2010 6:18:20 PM PDT by snowsislander (In this election year, please ask your candidates if they support repeal of the 1968 GCA.)
[ Post Reply | Private Reply | To 15 | View Replies]

To: oc-flyfish

Most USB keyloggers out there already use the HID of a keyboard, been doing that for years. What’s new here?


21 posted on 07/06/2010 7:34:25 PM PDT by antiRepublicrat
[ Post Reply | Private Reply | To 1 | View Replies]

To: oc-flyfish

Jeez, that’s pretty serious, particularly since usb drives are so small - you’d have to carefully inspect the back-end of any computer you used that other people have had access to, like your computer at work, for instance.


22 posted on 07/06/2010 7:37:48 PM PDT by Oceander (The Price of Freedom is Eternal Vigilance -- Thos. Jefferson)
[ Post Reply | Private Reply | To 1 | View Replies]

To: snowsislander
I skimmed the paper, and I believe that a short summary is that a USB keyboard can be programmed to capture keystrokes and also can be setup to automatically type commands that can lead to compromise of data stored the system.

It's not just USB keyboards, it's any USB device:

Because the USB protocol relies on devices to properly identify themselves during enumeration, a USB Meta-Device could be programmed to identify itself as any USB device [9]. In this way, the USB Meta-Device could be configured to represent itself as a device associated with a vulnerable driver loaded on the network endpoint.

This is what happens when dumb devices get smart enough to be convenient. These days, the toaster wants its own static IP.

Not to worry, we'll soon be able to upgrade to the New Improved USB 4.0, Now With Fewer Unintended Channels!

Bah.

23 posted on 07/06/2010 7:47:32 PM PDT by TChad
[ Post Reply | Private Reply | To 20 | View Replies]

To: UCANSEE2

like using the cd caddie as a cup holder


24 posted on 07/06/2010 8:09:49 PM PDT by markman46 (engage brain before using keyboard!!!)
[ Post Reply | Private Reply | To 12 | View Replies]

To: markman46

What??? You mean the cup holder is supposed to be used for CDs??? Ya learn something new every day.


25 posted on 07/06/2010 9:22:44 PM PDT by oc-flyfish
[ Post Reply | Private Reply | To 24 | View Replies]

To: TChad
I believe that all that paragraph effectively means is that any USB device could identify itself (also) as a keyboard, and do the same trick of entering data to a command line or equivalent program.

Did you see anywhere in the paper where that subversion of USB identification is suggested for anything else useful? I didn't, although I haven't read it closely.

26 posted on 07/06/2010 9:28:44 PM PDT by snowsislander (In this election year, please ask your candidates if they support repeal of the 1968 GCA.)
[ Post Reply | Private Reply | To 23 | View Replies]

To: UCANSEE2
I cleaned my USB drive, but after I got it out of the dryer, it no longer worked.

Funny, mine survived the dryer.

27 posted on 07/07/2010 5:44:03 AM PDT by antiRepublicrat
[ Post Reply | Private Reply | To 12 | View Replies]

To: oc-flyfish

yep makes a great cup holder.dont make em like they used to snap real easy have to buy new sometimes


28 posted on 07/07/2010 6:10:14 AM PDT by markman46 (engage brain before using keyboard!!!)
[ Post Reply | Private Reply | To 25 | View Replies]

To: Marty62

It keeps a guy from rolling out of bed and falling onto the floor. Look at it as a blessing.


29 posted on 07/07/2010 2:55:25 PM PDT by B4Ranch (Remember, guys, the enemy is to the left.)
[ Post Reply | Private Reply | To 5 | View Replies]

To: Marty62

It keeps us guys from rolling out of bed and falling onto the floor. Look at it as a blessing.


30 posted on 07/07/2010 2:55:42 PM PDT by B4Ranch (Remember, guys, the enemy is to the left.)
[ Post Reply | Private Reply | To 5 | View Replies]

Disclaimer: Opinions posted on Free Republic are those of the individual posters and do not necessarily represent the opinion of Free Republic or its management. All materials posted herein are protected by copyright law and the exemption for fair use of copyrighted works.

Free Republic
Browse · Search
News/Activism
Topics · Post Article

FreeRepublic, LLC, PO BOX 9771, FRESNO, CA 93794
FreeRepublic.com is powered by software copyright 2000-2008 John Robinson