Jump to content

USB 'critically flawed' after bug discovery, researchers say


Recommended Posts

76818017_usb1thinkstock.jpg
 

Cyber-security experts have dramatically called into question the safety and security of using USB to connect devices to computers.

Berlin-based researchers Karsten Nohl and Jakob Lell demonstrated how any USB device could be used to infect a computer without the user’s knowledge.

The duo said there is no practical way to defend against the vulnerability.

The body responsible for the USB standard said manufacturers could build in extra security.

But Mr Nohl and Mr Lell said the technology was “critically flawed”.

It is not uncommon for USB sticks to be used as a way of getting viruses and other malicious code onto target computers.

Most famously, the Stuxnet attack on Iranian nuclear centrifuges was believed to have been caused by an infected USB stick.

However, this latest research demonstrated a new level of threat – where a USB device that appears completely empty can still contain malware, even when formatted.

The vulnerability can be used to hide attacks in any kind of USB-connected device – such as a smartphone.

“It may not be the end of the world today,” Mr Nohl told journalists, “but it will affect us, a little bit, every day, for the next 10 years”.

Link: Source

Link to comment
Share on other sites


The news is kinda old (by tech standards), and common sense applying to sexual relations has always applied to digital connections as well. Other connectivity technologies are also as dangerous such as Firewire and Thunderbolt, which allow direct unfettered access to computer memory simply by being physically connected.

 

It's been a standard practice in highly secure environments already to ban peripherals and seal off USB ports and such with resin.

Link to comment
Share on other sites

Archived

This topic is now archived and is closed to further replies.

×
×
  • Create New...

Important Information

By using this site, you agree to our Terms of Use.