Re: openbsd and badusb

2014-08-09 Thread David Vasek
Hello, I have already met something of that kind. Not exactly, but very close. A USB flash drive that changes its vendor and model on the fly. Both strings and IDs changed. Light intensity of the blinking LED also changed at the same time. Just plug and unplug. I think that in a similar way as

Re: openbsd and badusb

2014-08-05 Thread Franchini Fabien
Hello ! I'm not sure that this exploit affect only Windows system. Autorun != USB stick firmware. Autorun is a part of the Windows system wich configure the device when it's mounted. (See : https://en.wikipedia.org/wiki/AutoRun for more information about) The USB stick firmware is like the BIOS..

Re: [Bulk] Re: openbsd and badusb

2014-08-04 Thread Giancarlo Razzolini
On 04-08-2014 11:11, Kevin Chadwick wrote: > previously on this list Giancarlo Razzolini contributed: > >> I don't see anything new about this attack. The theory behind >> it was invented with USB itself. > I haven't looked into it but thought it might have something to do with > "On the Go" but I

Re: [Bulk] Re: openbsd and badusb

2014-08-04 Thread Kevin Chadwick
previously on this list Giancarlo Razzolini contributed: > I don't see anything new about this attack. The theory behind > it was invented with USB itself. I haven't looked into it but thought it might have something to do with "On the Go" but I guess not then. -- _

Re: openbsd and badusb

2014-08-04 Thread Giancarlo Razzolini
On 02-08-2014 04:20, Dmitry Orlov wrote: > infection does not penetrate NON-Windows systems. Yes, because windows automatically runs anything you throw at it. autorun is an abomination, but it can be disabled. That is not to say that some badusb device couldn't lie to OpenBSD, or any other *nix for

Re: openbsd and badusb

2014-08-02 Thread Theo de Raadt
> #badbios redux? > I seem to recall it was suspected that badbios started > with an infected USB stick. I recall differently: badbios required a yellow reporter.

Re: openbsd and badusb

2014-08-02 Thread Dmitry Orlov
OpenBSD deny such devices. Don't worry :) And, infection does not penetrate NON-Windows systems. Wait blackhat and read reports. On 02.08.2014 03:27, patrick keshishian wrote: On 8/1/14, Gustav Fransson Nyvell wrote: On 08/01/14 23:01, Ted Unangst wrote: You may have heard about the "badusb"

Re: openbsd and badusb

2014-08-01 Thread patrick keshishian
On 8/1/14, Gustav Fransson Nyvell wrote: > On 08/01/14 23:01, Ted Unangst wrote: >> You may have heard about the "badusb" talk coming at blackhat. In >> theory, we should wait to watch the talk and see what it's actually >> about, but since some people can't wait that long, here's a few >> thought

Re: openbsd and badusb

2014-08-01 Thread patrick keshishian
#badbios redux? I seem to recall it was suspected that badbios started with an infected USB stick. On 8/1/14, Ted Unangst wrote: > You may have heard about the "badusb" talk coming at blackhat. In > theory, we should wait to watch the talk and see what it's actually > about, but since some people

Re: openbsd and badusb

2014-08-01 Thread Gustav Fransson Nyvell
On 08/01/14 23:01, Ted Unangst wrote: You may have heard about the "badusb" talk coming at blackhat. In theory, we should wait to watch the talk and see what it's actually about, but since some people can't wait that long, here's a few thoughts. (I'm a little surprised nobody has asked here alrea

openbsd and badusb

2014-08-01 Thread Ted Unangst
You may have heard about the "badusb" talk coming at blackhat. In theory, we should wait to watch the talk and see what it's actually about, but since some people can't wait that long, here's a few thoughts. (I'm a little surprised nobody has asked here already. I have some time free, thought I'd b