Regain Some Trust in Unknown USB Drives

-

For how useful USB thumb drives are for quickly toting around and copying files from one computer to another, they can be a bit of a security headache. Programs can be loaded on them with all kinds of malware; they can be obscured in some ways that are difficult to detect, and they can be set up to execute certain programs when they’re plugged in. The general wisdom is to simply avoid untrusted USB devices completely, but that sort of abstinence-only policy rarely works in the real world. If, for some reason, an untrusted USB device absolutely needs to be used, many of these security issues can be mitigated with this tool.

Built by [Novamostra], the device is simple on the surface: it’s a Raspberry Pi Pico mated to a 2-in-1 USB splitter cable. But with the USB Neutralizer software they have written loaded onto the Pico, it automatically destroys the ability of any connected USB thumb drive to load files. The program works by deleting the first and last 34 Logical Block Addressing (LBA) sectors on the drive immediately when it’s plugged in, without doing anything else. This effectively corrupts the drive bad enough to prevent malicious software in the partitions from doing anything, allowing the user to (relatively) safely put the USB drive into their computer and format it for re-use. The code for this tool is also open-source and reviewable on the project’s GitHub page.

Of course, this isn’t a perfect security solution for all USB attacks. It doesn’t erase or replace the firmware on the drive itself, and although firmware-level attacks are rare they’re not out of the question for all users, all the time. It also won’t prevent a malicious physical attack like this high-voltage one, and it may also not stop hidden or obscured partitions or devices programmed for storage and some other nefarious purpose simultaneously, like a USB HID. But still, this solves a great many of the problems associated with getting new drives from semi-untrustworthy sources, like retailers or friends whose computer skills we don’t fully trust.



from Blog – Hackaday https://ift.tt/VYrIPko

Comments

Post a Comment

Popular posts from this blog

Modern Radio Receiver Architecture: From Regenerative to Direct Conversion

-
Image
Modern radio receivers have a distinct advantage over the common early designs which I covered in my previous article . Most of the receivers you will have worked with over the past couple decades are designs by Edwin Armstrong ; regenerative, superregenerative, or most commonly superheterodyne. These are distinguished by a few fascinating key traits that bring both benefits and drawbacks. Today let’s dive into Mr. Armstrong’s receivers. I’ll also talk about DC receivers which, despite the name, are not made to listen to batteries. These are receivers you are much more likely to encounter in modern equipment. Regenerative and Superregenerative The regenerative receiver is all about doing more with less. You still see some of these in simple applications like RF remote controls. The idea derives from how an oscillator works. In a simple way of thinking, an oscillator is an amplifier with enough positive feedback that any tiny signal at the right frequency will amplify and then, throu...
Get this one»

Custom Macro Keyboard Looks Good in Wood

-
Image
There’s more than one way to make a mechanical macro pad, and this wooden wonder represents one of our favorites . [Tauno Erik] had an old rubber dome rectangle keyboard lying around that still worked, but the poor thing was missing some of its caps. After salvaging the controller, [Tauno Erik] got to work on the tedious task of figuring out the mapping of the matrix, which was made easier with a Python script. Almost every component of this beauty is wood, including the mounting plate and those thicc and lovely keycaps — their top layer is solid oak, and the bottom bit is birch plywood. In order to interface the ‘caps with the switches, [Tauno Erik] designed and printed connector pieces that sit inside the extra large keycaps and accept the stems of the key switches. Speaking of switches, we’re not sure if [Tauno Erik] ended up using Cherry green switches, browns, or a mix of both (that would be interesting), but each one is mounted on a custom PCB along with a diode and a pull-up ...
Get this one»

Fractal Vise Holds Odd-Shaped Objects Tight

-
Image
A regular vice is great if you want to clamp rectangular objects, but it can fall down a little with more complex shapes. Inspired by an ancient vise [Chris Borge] whipped up his own 3D-printed fractal clamping tool . The inspiration for this one comes from the [Hand Tool Rescue] video that shows of the clever mechanism . The vice uses a series of interlocking parts that can freely articulate to grip the object of interest via several protruding fingers. In reproducing the design, [Chris] had some issues initially with the joints, but settling on a dovetail similar to that of the original metal vice which got things working nicely. [Chris] notes that while the design works, it could still use some refinement. Silicone or rubber tips on the fingers could give the vice better grip, and there remain some flexural issues that could be improved. Overall, however, it’s a useful table vice for small jobs on weird shaped things. We’ve seen 3D-printed vices before, particularly in the PCB vi...
Get this one»