this post was submitted on 20 Nov 2023
794 points (100.0% liked)
196
16514 readers
2293 users here now
Be sure to follow the rule before you head out.
Rule: You must post before you leave.
founded 1 year ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
I kinda wanna try buying a bunch of virus usb sticks and putting them into important pcs at work. Or leave them lying around the office.
A USB flash drive with viruses on will probably be pretty ineffective; someone would need to run the virus manually without AV picking it up which is pretty unheard of. Plus, any organisation worth it's salt will have a policy that automatically blocks drives that aren't encrypted with a company-issued encryption key.
The real risk is that a device like this can emulate any USB device, including disks, keyboards, monitors, serial devices, etc. So you plug in the key and in a split second it opens a terminal and types a dozen especially tasty commands...
What if it exploits the complex USB stack though?