Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

No, but they do have "I'm really a hub with a keyboard and a mouse (and a mass storage device) behind it". Or, if you go for simple but (too often) effective, "please autorun evil.exe". (Also, how well-secured do you think your USB stack is? It's been exposed to tons of shitty devices, of course, but proper attacks?)

USB isn't to be trusted, either.



Unless someone invests time into creating a safe, open-source USB passthrough device. I imagine it wouldn't be that hard to do for specific USB classes. It could even spot a "charge-mode" switch which cuts data lines as an option.


Right, neither is trustworthy, so we agree :)




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: