On 10/25/2016 09:09 AM, Robert Mittendorf wrote:
Am 10/25/2016 um 09:05 AM schrieb Andrew David Wong:
On 2016-10-24 23:48, pixel fairy wrote:
can the a usbvm be used to detect malicious usb devices? has anyone
tried this?
Sure, you can run whatever kind of detection software you like in a
USB VM.
However, not all malicious USB devices are detectable (whether you're
in a USB VM
or somewhere else). I haven't tried it.
-----END PGP SIGNATURE-----
Example: A thumb drive that claims to be a keyboard to record your key
strokes. How would you detect that?
ISTM ITL has considered this issue, and here's a writeup:
<https://www.qubes-os.org/doc/usb/>
I'd guess you'd try lsusb and dmesg before and after insertion
(insertion after the OS is up and running).
As to the OP, he may be referring to Windows autorun files which can be
simply listed.
Naturally, use an offline DispVM for these tests.
--
You received this message because you are subscribed to the Google Groups
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To post to this group, send email to [email protected].
To view this discussion on the web visit
https://groups.google.com/d/msgid/qubes-users/22bc35c1-fda5-62c8-d308-7dad5adc099b%40gmail.com.
For more options, visit https://groups.google.com/d/optout.
