Re: [qubes-users] detecting malicious usb devices

2016-10-25 Thread Ilpo Järvinen
On Tue, 25 Oct 2016, Vít Šesták wrote: > I am not sure if the devices can sniff both directions. I've believed > that a device can sniff only inbound data and cannot communicate with > other devices. I've tried to look for some document that would allow me > to be sure about this, but I've

Re: [qubes-users] detecting malicious usb devices

2016-10-25 Thread Vít Šesták
USB does not have DMA capabilities. If you have access to DMA, you have already got access to the controller or the usbvm. You probably can get into USBVM easily from an USB device by logging as root on the login screen. This, however, assumes that keystrokes are not captured by other means,

Re: [qubes-users] detecting malicious usb devices

2016-10-25 Thread pixel fairy
On Tuesday, October 25, 2016 at 11:43:51 AM UTC-4, Vít Šesták wrote: > I am not sure if the devices can sniff both directions. I've believed that a > device can sniff only inbound data and cannot communicate with other devices. > I've tried to look for some document that would allow me to be

Re: [qubes-users] detecting malicious usb devices

2016-10-25 Thread Vít Šesták
I am not sure if the devices can sniff both directions. I've believed that a device can sniff only inbound data and cannot communicate with other devices. I've tried to look for some document that would allow me to be sure about this, but I've found nothing. Well, the official documentation

Re: [qubes-users] detecting malicious usb devices

2016-10-25 Thread Robert Mittendorf
Am 10/25/2016 um 04:15 PM schrieb Vít Šesták: I don't think that a USB drive can directly record keystrokes. The communication goes in the opposite direction that the USB drive would need. A malicious USB drive can also listen the data going to other USB devices on the same controller. You

Re: [qubes-users] detecting malicious usb devices

2016-10-25 Thread Robert Mittendorf
Am 10/25/2016 um 09:05 AM schrieb Andrew David Wong: -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On 2016-10-24 23:48, pixel fairy wrote: can the a usbvm be used to detect malicious usb devices? has anyone tried this? Sure, you can run whatever kind of detection software you like in a USB

Re: [qubes-users] detecting malicious usb devices

2016-10-25 Thread Andrew David Wong
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On 2016-10-24 23:48, pixel fairy wrote: > can the a usbvm be used to detect malicious usb devices? has anyone tried > this? > Sure, you can run whatever kind of detection software you like in a USB VM. However, not all malicious USB devices are

[qubes-users] detecting malicious usb devices

2016-10-25 Thread pixel fairy
can the a usbvm be used to detect malicious usb devices? has anyone tried this? -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to