Ask HN: How to avoid USB firmware attacks

Ask HN: How to avoid USB firmware attacks

2 by bla54321 | 2 comments on Hacker News.

I'm aware of USB firmware attacks where a bad actor will leave a stray USB around with the hope of a target using it and compromising their computer. This basically can be avoided by not plugging in a USB stick you don't own. But what precautions can one take when buying a USB device on a website like amazon? It's not beyond the realm of possibilities that a potential attack target could be to pre-package USB devices with malicious firmware and sell or re-sell on a site like Amazon. Is this is known attack vector, and is there anything one could do to prevent something like this?



Comments

Post a Comment

Popular posts from this blog

Intentional dark pattern by Coinbase or just terrible UI?

Intentional dark pattern by Coinbase or just terrible UI? 2 by jjeaff | 0 comments on Hacker News. I recently needed to check a past transfer to confirm that I was sending some crypto to the same wallet address. In the past, the last few transactions showed up on the "Pay" page. They have since renamed "Pay" to Transfers or something like that. They no longer show past transactions, so I went down a rabbit hole of searching through the app, couldn't find it, then had to google it and found a help page for Coinbase. There is a link in the article to coinbase.com/reports (I can find no way to get to it from the web app except by following the link from the help article.) Once there, you can select the date ranges you want and generate a transaction report in PDF or CSV and then you have to wait a bit while it generates the report for you to download. What kind of UI craziness is this? A user's transaction history is such a basic feature, I can't imagine c...
Read more