Free Republic
Browse · Search
News/Activism
Topics · Post Article

Skip to comments.

Researchers discover way to create trojans in USB hardware
Tech 1984 ^ | 7/6/2010 | Tech 1984

Posted on 07/06/2010 3:36:38 PM PDT by oc-flyfish

click here to read article


Navigation: use the links below to view more comments.
first previous 1-2021-30 last
To: oc-flyfish

Most USB keyloggers out there already use the HID of a keyboard, been doing that for years. What’s new here?


21 posted on 07/06/2010 7:34:25 PM PDT by antiRepublicrat
[ Post Reply | Private Reply | To 1 | View Replies]

To: oc-flyfish

Jeez, that’s pretty serious, particularly since usb drives are so small - you’d have to carefully inspect the back-end of any computer you used that other people have had access to, like your computer at work, for instance.


22 posted on 07/06/2010 7:37:48 PM PDT by Oceander (The Price of Freedom is Eternal Vigilance -- Thos. Jefferson)
[ Post Reply | Private Reply | To 1 | View Replies]

To: snowsislander
I skimmed the paper, and I believe that a short summary is that a USB keyboard can be programmed to capture keystrokes and also can be setup to automatically type commands that can lead to compromise of data stored the system.

It's not just USB keyboards, it's any USB device:

Because the USB protocol relies on devices to properly identify themselves during enumeration, a USB Meta-Device could be programmed to identify itself as any USB device [9]. In this way, the USB Meta-Device could be configured to represent itself as a device associated with a vulnerable driver loaded on the network endpoint.

This is what happens when dumb devices get smart enough to be convenient. These days, the toaster wants its own static IP.

Not to worry, we'll soon be able to upgrade to the New Improved USB 4.0, Now With Fewer Unintended Channels!

Bah.

23 posted on 07/06/2010 7:47:32 PM PDT by TChad
[ Post Reply | Private Reply | To 20 | View Replies]

To: UCANSEE2

like using the cd caddie as a cup holder


24 posted on 07/06/2010 8:09:49 PM PDT by markman46 (engage brain before using keyboard!!!)
[ Post Reply | Private Reply | To 12 | View Replies]

To: markman46

What??? You mean the cup holder is supposed to be used for CDs??? Ya learn something new every day.


25 posted on 07/06/2010 9:22:44 PM PDT by oc-flyfish
[ Post Reply | Private Reply | To 24 | View Replies]

To: TChad
I believe that all that paragraph effectively means is that any USB device could identify itself (also) as a keyboard, and do the same trick of entering data to a command line or equivalent program.

Did you see anywhere in the paper where that subversion of USB identification is suggested for anything else useful? I didn't, although I haven't read it closely.

26 posted on 07/06/2010 9:28:44 PM PDT by snowsislander (In this election year, please ask your candidates if they support repeal of the 1968 GCA.)
[ Post Reply | Private Reply | To 23 | View Replies]

To: UCANSEE2
I cleaned my USB drive, but after I got it out of the dryer, it no longer worked.

Funny, mine survived the dryer.

27 posted on 07/07/2010 5:44:03 AM PDT by antiRepublicrat
[ Post Reply | Private Reply | To 12 | View Replies]

To: oc-flyfish

yep makes a great cup holder.dont make em like they used to snap real easy have to buy new sometimes


28 posted on 07/07/2010 6:10:14 AM PDT by markman46 (engage brain before using keyboard!!!)
[ Post Reply | Private Reply | To 25 | View Replies]

To: Marty62

It keeps a guy from rolling out of bed and falling onto the floor. Look at it as a blessing.


29 posted on 07/07/2010 2:55:25 PM PDT by B4Ranch (Remember, guys, the enemy is to the left.)
[ Post Reply | Private Reply | To 5 | View Replies]

To: Marty62

It keeps us guys from rolling out of bed and falling onto the floor. Look at it as a blessing.


30 posted on 07/07/2010 2:55:42 PM PDT by B4Ranch (Remember, guys, the enemy is to the left.)
[ Post Reply | Private Reply | To 5 | View Replies]


Navigation: use the links below to view more comments.
first previous 1-2021-30 last

Disclaimer: Opinions posted on Free Republic are those of the individual posters and do not necessarily represent the opinion of Free Republic or its management. All materials posted herein are protected by copyright law and the exemption for fair use of copyrighted works.

Free Republic
Browse · Search
News/Activism
Topics · Post Article

FreeRepublic, LLC, PO BOX 9771, FRESNO, CA 93794
FreeRepublic.com is powered by software copyright 2000-2008 John Robinson