The root issue is that Windows, by design, appears to search every nook and cranny for any sort of an executable and, if found, execute it. And there are a mind numbing number of nooks and crannies.
The last I heard, MS never did figure out how to completely disable the autorun facility. I speculate that many devices simply won't work at all unless given a chance to submit code for execution. -----Original Message----- From: IBM Mainframe Discussion List [mailto:[email protected]] On Behalf Of Binyamin Dissen Sent: Wednesday, July 06, 2011 6:22 AM To: [email protected] Subject: Re: If you found used gum in the parking lot, would you chew it? On Wed, 6 Jul 2011 06:09:26 -0500 Norbert Friemel <[email protected]> wrote: :>On Thu, 30 Jun 2011 11:56:56 -0500, Mike Schwab wrote: :>>The main thing would be to disable the auto run feature before inserting. :>The "evil mouse" works with autorun disabled: :>http://pentest.snosoft.com/2011/06/24/netragards-hacker-interface-device-hid/ I don't really get it. Is a mouse such a thick client that the OS has to run code from it? The drivers extract executable code from the mouse memory? -- Binyamin Dissen <[email protected]> http://www.dissensoftware.com Director, Dissen Software, Bar & Grill - Israel Should you use the mailblocks package and expect a response from me, you should preauthorize the dissensoftware.com domain. I very rarely bother responding to challenge/response systems, especially those from irresponsible companies. ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html NOTICE: This electronic mail message and any files transmitted with it are intended exclusively for the individual or entity to which it is addressed. The message, together with any attachment, may contain confidential and/or privileged information. Any unauthorized review, use, printing, saving, copying, disclosure or distribution is strictly prohibited. If you have received this message in error, please immediately advise the sender by reply email and delete all copies. ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
