Page 1 of 1

BadUSB devices

Posted: Aug 19th, 2014, 5:56 am
by Techland
Hello Igor,

since the demonstration and demo of BadUSB devices, which take over your computer unnoticed by coming as USB thumbdrive with internal USB keyboard, I wondered if it isn't quite easy to fix this potential threat for USR users: Adding an option that every time a USB keyboard is detected a confirmation dialog requires the user to allow this device to be enabled!

I just noticed that the quite famous USB Drive Letter Manager (from Uwe Sieber) added such a confirmation for USB keyboards to his program in the latest version, as protection from BadUSB devices.

This looks like an easy, simple and efficient way of adding substantial value to USR. You could even use this in advertising (protect yourself from BadUSB devices...).

https://srlabs.de/badusb/

(Or maybe this is possible already now and I missed how to do it?)

Re: BadUSB devices

Posted: Aug 21st, 2014, 10:37 am
by Igor
Techland wrote: I just noticed that the quite famous USB Drive Letter Manager (from Uwe Sieber) added such a confirmation for USB keyboards to his program in the latest version, as protection from BadUSB devices.
Hi Techland,
We will consider adding this feature. Also now if you connect such bad device you will see the notification about connection of some device with the "Keyboard" icon.
Image

USB Safely Remove automatically assigns icons based on their classes.

Re: BadUSB devices

Posted: Aug 21st, 2014, 2:02 pm
by Techland
Thanks for adding this feature in the future!

The icon - well, once you get past 50 years you will understand that small things like this are easily overlooked :shock: :wink:

Re: BadUSB devices

Posted: Sep 5th, 2014, 4:07 am
by Techland
Update: the first anti virus software with BadUSB protection has been released:

http://www.heise.de/newsticker/meldung/ ... 29545.html

I still would prefer this to be handled by USR.

Re: BadUSB devices

Posted: Oct 3rd, 2014, 7:04 am
by Techland
And here we go: complete packs have been posted to use conventional USB sticks for BadUSB attacks. It's now getting more than real...

https://github.com/adamcaudill/Psychson