Comments on: Don’t trust your hardware

By: aimshaman

aimshaman — Thu, 15 Jun 2006 02:33:47 +0000

http://i11.ebayimg.com/01/i/07/64/e5/0b_1_b.JPG

chrome and leather usb flash drive, centon makes them..

By: lnce

lnce — Tue, 21 Mar 2006 02:17:56 +0000

Anyone know what program spoonman was talking about this may come in handy. (Evil Laugh)

By: David Maynor

David Maynor — Tue, 21 Feb 2006 09:19:21 +0000

Wim L:
1. Its not just OHCI, it

By: Wim L

Wim L — Mon, 06 Feb 2006 23:19:53 +0000

durrh? count me among the skeptical when it comes to the usb hackery. I think the presenter either doesn’t know what he’s talking about, or is throwing terms like “dma” around just to sound good.

yes, your OHCI usb host controller can perform dma transfers. no, this doesn’t mean that a usb *device* has the ability to initiate a transfer to an arbitrary address.

yes, a usb device driver could have a buffer overflow. this has everything to do with buggy drivers and nothing to do with usb in general.

yes, you can put an autorun on a usb-mounted filesystem, and if you’re running a stupid os, it might run that. no, this is not news.

yes, cardbus cards are effectively PCI cards and can perform arbitrary bus transactions. yes, this is interesting and can probably be used to bypass OS security.

one out of four is pretty pathetic, for someone who’s claiming to be some sort of security expert.

By: Hannes

Hannes — Sat, 04 Feb 2006 18:41:21 +0000

wouldn’t this be a perfect application for the gp2x portable game console? It’s affordable, lightweight & linux programmable and of course it sports an usb port…

By: Bain

Bain — Tue, 24 Jan 2006 22:36:11 +0000

RatWare what what I used to bypass 9x systems with a passworded screensaver. And yes it used the autorun feature while the screensaver was on.

By: dbarrall

dbarrall — Fri, 18 Nov 2005 20:30:28 +0000

There are plenty of overflows in USB drivers, either device specific or class drivers, to exploit. I demonstrated two at BlackHat ‘05. One point of my preso was to show that a device can be created that will convince an operating system to load a specific device driver (one you know to have an overflow) for the device to exploit.

By: Xin xue

Xin xue — Sun, 13 Nov 2005 11:55:04 +0000

I saw David Maynor’s talk in CanSecWest, and I didn’t believe a single word of what he said. All the presentation looked like it was put in 5 minutes, and made only to lough of something Dan Kaminsky said. David Maynor didn’t show a demo (he had lost his phone… but it was on his pocket right after he finished the presentation).

On the other side, Maximillian Dornself does do what he sais (do direct DMA access from an iPod using firewire). Unless there is a bug in the USB drivers (like buffer overflow or something), it’s not feasable using the straight USB protocol, however, firewire protocol does include DMA (and that’s the problem)

By: monster

monster — Sat, 12 Nov 2005 07:29:43 +0000

#12

huh?

By: fucter

fucter — Fri, 11 Nov 2005 18:49:49 +0000

the chrome pendrive is here:
http://www.linksoflondon.com/Category.aspx/!3010.0178 but its 95(brit cash)

By: graham

graham — Fri, 11 Nov 2005 10:32:11 +0000

12:
Get either Opera or Firefox. Then, get Tor and Privoxy. The Tor website should have instructions for setting up Privoxy and how to get webrowsers to use it (i.e., setting the browser to use a proxy server at localhost on port 8118). Put this all on your thumbdrive. You should be able to use that browser to bypass filtering once you run Tor and Privoxy.

Thats what I do at my school, except I put everything hidden away on a shared network drive.

By: mike

mike — Fri, 11 Nov 2005 09:50:49 +0000

http://www.engadget.com/entry/1234000030067069

hrm, this looks like it could execute code autonomously… down right blow the computer up if it had too… fun stuff.

By: acidrain

acidrain — Fri, 11 Nov 2005 07:03:08 +0000

To #4,

You have all this security in mind, but what happens if they use remote desktop or VNC or in read only mode and just watch you open things?

Don’t ever assume what you are doing at work is secure from your employers. They could wait till you are gone and dump the memory and virtual memory. They can take periodic screenshots.

#3 hit this right on. If someone is close enough to use a hacked USB keychain or plant one on an unsuspecting employee, then you have a personnel or physical security issue, not a software/hardware issue.

By: Eliot Phillips

Eliot Phillips — Thu, 10 Nov 2005 22:35:41 +0000

It’s silver plated. I found it on Engadget, but the link is broken. http://www.engadget.com/entry/4622731184115930/

The camels are mine suckers!

By: hfx392

hfx392 — Thu, 10 Nov 2005 22:15:29 +0000

1000 camels to the man that figures out who makes that drive and where we can get it.