User Tag List

Results 1 to 5 of 5

Thread: Why the Security of USB Is Fundamentally Broken

  1. #1
    Member
    • Rubab's Gadgets
      • Motherboard:
      • Gigabyte B85M-D3H
      • CPU:
      • Intel Core i5 4570 3.2GHz
      • RAM:
      • G.SKILL Ripjaws (2 x 4GB) DDR3 1600 Bus
      • Hard Drive:
      • Samsung 840 Evo 120 + Samsung HD103SJ 1TB
      • Graphics Card:
      • Sapphire Dual-X R9270X 2GB
      • Display:
      • Benq V2220HP
      • Sound Card:
      • Realtek HD Built-In
      • Speakers/HPs:
      • Creative 2:1
      • Keyboard:
      • Ortek Multimedia MCK-800
      • Mouse:
      • Logitech HD Optical Mouse
      • Power Supply:
      • Corsair CX600
      • Optical Drive:
      • Lite-On DVD-RW / Asus-DVDROM
      • UPS:
      • Power Tree 1250P Offline UPS
      • Operating System:
      • Windows 10 Pro x64
      • Comment:
      • A decent rig. :)
      • ISP:
      • NOT Link3
    Rubab's Avatar
    Join Date
    Apr 2009
    Location
    Dhaka
    Posts
    926

    Default Why the Security of USB Is Fundamentally Broken

    ‘In this new way of thinking, you have to consider a USB infected and throw it away as soon as it touches a non-trusted computer.’

    Computer users pass around USB sticks like silicon business cards. Although we know they often carry malware infections, we depend on antivirus scans and the occasional reformatting to keep our thumbdrives from becoming the carrier for the next digital epidemic. But the security problems with USB devices run deeper than you think: Their risk isn’t just in what they carry, it’s built into the core of how they work.


    That’s the takeaway from findings security researchers Karsten Nohl and Jakob Lell plan to present next week, demonstrating a collection of proof-of-concept malicious software that highlights how the security of USB devices has long been fundamentally broken. The malware they created, called BadUSB, can be installed on a USB device to completely take over a PC, invisibly alter files installed from the memory stick, or even redirect the user’s internet traffic. Because BadUSB resides not in the flash memory storage of USB devices, but in the firmware that controls their basic functions, the attack code can remain hidden long after the contents of the device’s memory would appear to the average user to be deleted. And the two researchers say there’s no easy fix: The kind of compromise they’re demonstrating is nearly impossible to counter without banning the sharing of USB devices or filling your port with superglue.


    “These problems can’t be patched,” says Nohl, who will join Lell in presenting the research at the Black Hat security conference in Las Vegas. “We’re exploiting the very way that USB is designed.”


    Read the Entire Article Here
    Attached Thumbnails Attached Thumbnails Click image for larger version. 

Name:	140411_thumbdrive_data-660x440.jpg 
Views:	473 
Size:	43.6 KB 
ID:	34068  

  2. #2
    Noblesse Oblige
    • CvP's Gadgets
      • Motherboard:
      • ASUS P8Z77 V Delux
      • CPU:
      • Intel Core i7 3770K @3.9GHz
      • RAM:
      • GSkill TridentX 2x8GB DDR3 @2400MHz
      • Hard Drive:
      • Crucial M4 256GB SSD; WD Caviar Black 2TB; Hitachi 250GB; Samsung S3 1.5TB; Hitachi 2TB
      • Graphics Card:
      • EVGA 980Ti 6GB
      • Display:
      • Samsung 17"+22"+22"
      • Sound Card:
      • Realtek HD Audio <internal>
      • Speakers/HPs:
      • Creative Inspire 5:1
      • Keyboard:
      • Razer BlackWidow Ultimate
      • Mouse:
      • G7
      • Power Supply:
      • Seasonic X 850W 80Plus Gold
      • Optical Drive:
      • External DVD-RW
      • USB Devices:
      • Logitech Carl Zeiss Tessar HD 1080p Webcam
      • UPS:
      • Mercury 1500VA with Large Lead-Acid Battery
      • Operating System:
      • Genuine Windows 10 Pro
      • Comment:
      • Everything packed in a NZXT Phantom 820
      • ISP:
      • Link3/Amber IT
      • Download Speed:
      • 10000
      • Upload Speed:
      • 10000
    CvP's Avatar
    Join Date
    Feb 2008
    Location
    Dhaka, Bangladesh
    Posts
    9,019

    Default

    I read an article about this about a few days ago. Pretty scary stuff.
    The abuse of greatness is when it disjoins remorse from power.
    Please do not PM me for support. You will NOT get a reply. Post in the relevant forum section.

  3. #3
    Member
    • Rubab's Gadgets
      • Motherboard:
      • Gigabyte B85M-D3H
      • CPU:
      • Intel Core i5 4570 3.2GHz
      • RAM:
      • G.SKILL Ripjaws (2 x 4GB) DDR3 1600 Bus
      • Hard Drive:
      • Samsung 840 Evo 120 + Samsung HD103SJ 1TB
      • Graphics Card:
      • Sapphire Dual-X R9270X 2GB
      • Display:
      • Benq V2220HP
      • Sound Card:
      • Realtek HD Built-In
      • Speakers/HPs:
      • Creative 2:1
      • Keyboard:
      • Ortek Multimedia MCK-800
      • Mouse:
      • Logitech HD Optical Mouse
      • Power Supply:
      • Corsair CX600
      • Optical Drive:
      • Lite-On DVD-RW / Asus-DVDROM
      • UPS:
      • Power Tree 1250P Offline UPS
      • Operating System:
      • Windows 10 Pro x64
      • Comment:
      • A decent rig. :)
      • ISP:
      • NOT Link3
    Rubab's Avatar
    Join Date
    Apr 2009
    Location
    Dhaka
    Posts
    926

    Default

    Here is an updated article with video about this:
    USB 'critically flawed' after bug discovery, researchers say

  4. #4
    Member
    • avas911's Gadgets
      • Motherboard:
      • Gigabyte GA-EG41MF-US2H
      • CPU:
      • Intel Pentium Dual Core E6500 2.9 GHz 2MB L2 1066MHz FSB
      • RAM:
      • 2x2GB 800 MHz Apecer at 5-5-5-15
      • Hard Drive:
      • OCZ Vertex 3 120GB Sata III & Samsung 103SJ 1 TB F3
      • Graphics Card:
      • Sapphire ATI RADEON HD6850 1GB GDDR5
      • Display:
      • Philips 107S7 17" at [email protected]
      • Sound Card:
      • Built In Realtek ALC883
      • Speakers/HPs:
      • Creative SBS A200 / Cosonic Generic / Logitech Ultimate Ears 200vi/SoundMAGIC E10M IEM
      • Keyboard:
      • A4Tech
      • Mouse:
      • A4Tech X7 XL-747H 3600 DPI
      • Controller:
      • None
      • Power Supply:
      • Delta GPS-500AB A 500W
      • Optical Drive:
      • Asus 16x IDE DVD R
      • USB Devices:
      • Transcend 500 8GB & Corsair Survivor USB 3.0 16GB & Samsung Class 10 16GB mSDHC
      • UPS:
      • Rahimafrooz 600VA Premium
      • Operating System:
      • Win7 Ultimate 64Bit
      • Comment:
      • Slow in gaming
      • ISP:
      • Link3 512
      • Download Speed:
      • 70
      • Upload Speed:
      • 70
    avas911's Avatar
    Join Date
    Nov 2008
    Location
    Mohammadpur
    Posts
    4,251

    Default

    The first 128mb Flash Drive I had, had a write protection switch.

    I still dont get it why they had to stop using them.
    Once more into the fray
    Into the last good fight I’ll ever know

    Live and die on this day
    Live and Die on this day

  5. #5
    Member
    • Fox Mulder's Gadgets
      • Motherboard:
      • Gigabyte GA-Z77-D3H Rev 1.1 (Currently dead) | Intel DH55TC
      • CPU:
      • Core i5 3470 @ 3.8 Ghz (Currently not used) | intel Core i7 860 @ 3.3 GHz
      • RAM:
      • Corsair Vengeance 1600 MHz 2x4GB
      • Hard Drive:
      • Western Digital Blue 1 Terrabyte
      • Graphics Card:
      • Sapphire HD 7950 Vapor-X OC With Boost 3GB GDDR5 || Gigabyte GTX 680 Windforce 4GB
      • Display:
      • Philips 191EL 19" LED @77 Hz
      • Sound Card:
      • Creative Sound Blaster Live! 24 Bit
      • Keyboard:
      • Corsair K70 RGB
      • Mouse:
      • A4Tech 2X Click
      • Power Supply:
      • Thermaltake Smart 650W Modular
      • Optical Drive:
      • Samsung DVD Writer
      • UPS:
      • Spark Power (!) 1200VA
      • Operating System:
      • Windows 10 Build 10162
      • Comment:
      • It gets the job done!
      • ISP:
      • BracNet
      • Download Speed:
      • 1 Mbps
      • Upload Speed:
      • 1 Mbps
    Fox Mulder's Avatar
    Join Date
    Jul 2009
    Location
    I don't live in a city.
    Posts
    5,185

    Default

    I agree with what Salman bhai said. Why take a step backwards?

Similar Threads

  1. Replies: 8
    Last Post: April 9th, 2013, 09:46
  2. PSP screen broken...
    By Dark.light in forum PSP/PS Vita
    Replies: 7
    Last Post: December 13th, 2012, 12:03
  3. Broken printer\I want to fix it
    By S_F.darkzone in forum Technical Support
    Replies: 0
    Last Post: December 7th, 2011, 03:12
  4. Laptop broken
    By cyanid3 in forum Technical Support
    Replies: 10
    Last Post: December 1st, 2010, 00:13
  5. socket pin broken!!!
    By ЯV●FireBaLL in forum Motherboard
    Replies: 17
    Last Post: April 29th, 2010, 10:28

Tags for this Thread

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  
Page generated in 0.18856 seconds with 15 queries.