You have to have firmware to run the USB. And in their example they were able to create a malicious firmware that nothing checks for.
On Sun, Aug 10, 2014 at 11:00 PM, Binyamin Dissen <[email protected]> wrote: > On Sun, 10 Aug 2014 17:42:12 -0400 Ed Finnell > <[email protected]> wrote: > > :>_BBC News - USB 'critically flawed' after bug discovery, researchers say_ > :>(http://www.bbc.com/news/technology-28701124) > > Doesn't the base OS first have to allow the USB to be connected and declare > itself? Is there no way to force it to be storage only? > > -- > Binyamin Dissen <[email protected]> > http://www.dissensoftware.com > > Director, Dissen Software, Bar & Grill - Israel > > > Should you use the mailblocks package and expect a response from me, > you should preauthorize the dissensoftware.com domain. > > I very rarely bother responding to challenge/response systems, > especially those from irresponsible companies. > > ---------------------------------------------------------------------- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to [email protected] with the message: INFO IBM-MAIN -- Mike A Schwab, Springfield IL USA Where do Forest Rangers go to get away from it all? ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN
