BadUSB devices

Post Reply
Techland
Posts: 37
Joined: Aug 23rd, 2010, 2:07 am

BadUSB devices

Post by Techland » Aug 19th, 2014, 5:56 am

Hello Igor,

since the demonstration and demo of BadUSB devices, which take over your computer unnoticed by coming as USB thumbdrive with internal USB keyboard, I wondered if it isn't quite easy to fix this potential threat for USR users: Adding an option that every time a USB keyboard is detected a confirmation dialog requires the user to allow this device to be enabled!

I just noticed that the quite famous USB Drive Letter Manager (from Uwe Sieber) added such a confirmation for USB keyboards to his program in the latest version, as protection from BadUSB devices.

This looks like an easy, simple and efficient way of adding substantial value to USR. You could even use this in advertising (protect yourself from BadUSB devices...).

https://srlabs.de/badusb/

(Or maybe this is possible already now and I missed how to do it?)
User avatar
Igor
Developer
Posts: 563
Joined: Nov 1st, 2007, 12:44 pm
Location: Saint Petersburg
Contact:

Re: BadUSB devices

Post by Igor » Aug 21st, 2014, 10:37 am

Techland wrote: I just noticed that the quite famous USB Drive Letter Manager (from Uwe Sieber) added such a confirmation for USB keyboards to his program in the latest version, as protection from BadUSB devices.
Hi Techland,
We will consider adding this feature. Also now if you connect such bad device you will see the notification about connection of some device with the "Keyboard" icon.
Image

USB Safely Remove automatically assigns icons based on their classes.
Techland
Posts: 37
Joined: Aug 23rd, 2010, 2:07 am

Re: BadUSB devices

Post by Techland » Aug 21st, 2014, 2:02 pm

Thanks for adding this feature in the future!

The icon - well, once you get past 50 years you will understand that small things like this are easily overlooked :shock: :wink:
Techland
Posts: 37
Joined: Aug 23rd, 2010, 2:07 am

Re: BadUSB devices

Post by Techland » Sep 5th, 2014, 4:07 am

Update: the first anti virus software with BadUSB protection has been released:

http://www.heise.de/newsticker/meldung/ ... 29545.html

I still would prefer this to be handled by USR.
Techland
Posts: 37
Joined: Aug 23rd, 2010, 2:07 am

Re: BadUSB devices

Post by Techland » Oct 3rd, 2014, 7:04 am

And here we go: complete packs have been posted to use conventional USB sticks for BadUSB attacks. It's now getting more than real...

https://github.com/adamcaudill/Psychson
Post Reply