-
You find a USB stick on the ground in public, what do you do?
From
Digital Man@VERT to
All on Sun Sep 17 14:57:04 2023
-
From
Nightfox@VERT/DIGDIST to
Digital Man on Sun Sep 17 18:52:54 2023
Re: You find a USB stick on the ground in public, what do you do?ã By: Digital Man to on Sun Sep 17 2023 02:57 pmãã DM> (it's not your USB stick and you don't know where it came from)ããhmm.. DDMsgReader seems to be one off on voting on polls now (I know it used to be correct); I intended to vote for throwing it into the trash can, but it looks like it registered my vote as plugging it into a Wal-Mart computer.ããI don't think I'd want to plug a random USB stick into any computer, unless it was just a spare test computer and not connected to the internet (since I don't know what's on it). I'd wonder if someone might have malicious intent by leaving a USB stick somewhere, but I doubt the police would want to spend their time on it.ããNightfoxãã---ã þ Synchronet þ Digital Distortion: digitaldistortionbbs.comã
-
From
Digital Man@VERT to
Nightfox on Sun Sep 17 20:22:11 2023
Re: You find a USB stick on the ground in public, what do you do?ã By: Nightfox to Digital Man on Sun Sep 17 2023 06:52 pmãã > Re: You find a USB stick on the ground in public, what do you do?ã > By: Digital Man to on Sun Sep 17 2023 02:57 pmã >ã > DM> (it's not your USB stick and you don't know where it came from)ã >ã > hmm.. DDMsgReader seems to be one off on voting on polls now (I know itã > used to be correct); I intended to vote for throwing it into the trash can,ã > but it looks like it registered my vote as plugging it into a Wal-Martã > computer.ã >ã > I don't think I'd want to plug a random USB stick into any computer, unlessã > it was just a spare test computer and not connected to the internet (since Iã > don't know what's on it). I'd wonder if someone might have malicious intentã > by leaving a USB stick somewhere, but I doubt the police would want to spendã > their time on it.ããA malicious USB stick can actually physically destroy a computer (and possibly cause harm to people nearby):ã
https://www.darkreading.com/endpoint/rule-of-thumb-usb-killers-pose-real-threatããAlso, it's possible that a USB stick is not (just) a storage device, but could be a keyboard/mouse (HID) device disguised as a storage device, that when plugged in will do a bunch of things to/with your computer that you don't want.ã
https://blog.teamascend.com/rubber-duckyããThere's more than just the 'autorun' of malware to be concerned about.ããBut yeah, you should fix that voting problem. Walmart would appreciate it. :-)ã-- ã digital man (rob)ããSynchronet "Real Fact" #10:ãThe name "DOVE-Net" was suggested by King Drafus (sysop of The Beast's Domain)ãNorco, CA WX: 71.1øF, 76.0% humidity, 2 mph SE wind, 0.00 inches rain/24hrsã---ã þ Synchronet þ Vertrauen þ Home of Synchronet þ [vert/cvs/bbs].synchro.netã
-
From
Nelgin@VERT/EOTLBBS to
Digital Man on Mon Sep 18 21:39:30 2023
Re: You find a USB stick on the ground in public, what do you do?ã By: Digital Man to on Sun Sep 17 2023 14:57:04ãã > (it's not your USB stick and you don't know where it came from)ãã8. Plug it into a spare, non-internet connected computer without a hard drive running Linux from a CD with a BIOS likely too old to be infectable. :)ã---ã þ Synchronet þ End Of The Line BBS - endofthelinebbs.comã
-
From
Digital Man@VERT to
Nelgin on Mon Sep 18 20:46:36 2023
Re: You find a USB stick on the ground in public, what do you do?ã By: Nelgin to Digital Man on Mon Sep 18 2023 09:39 pmãã > Re: You find a USB stick on the ground in public, what do you do?ã > By: Digital Man to on Sun Sep 17 2023 14:57:04ã >ã > > (it's not your USB stick and you don't know where it came from)ã >ã > 8. Plug it into a spare, non-internet connected computer without a hardã > drive running Linux from a CD with a BIOS likely too old to be infectable.ããAnd Bang! 5 seconds later the computer smokes and catches fire. Wrong answer!ã-- ã digital man (rob)ããThis Is Spinal Tap quote #39:ãFemale Airport Security Officer: Do you have any artificial plates or limbs?ãNorco, CA WX: 74.7øF, 62.0% humidity, 10 mph SE wind, 0.00 inches rain/24hrsã---ã þ Synchronet þ Vertrauen þ Home of Synchronet þ [vert/cvs/bbs].synchro.netã
-
From
fusion@VERT/CFBBS to
Nelgin on Mon Sep 18 23:48:00 2023
On 18 Sep 2023, Nelgin said the following...ã ã Ne> 8. Plug it into a spare, non-internet connected computer without a hardã Ne> drive running Linux from a CD with a BIOS likely too old to beã Ne> infectable. :) ---ããthere's lots of creepy stuff that maybe hasn't been done yet.. for example a usb-c device that pretended to be a monitor could be fed everything you do.. assuming you managed to put the pc into 'mirror mode' .. something you might be able to automate by also making the usb stick include a keyboard/mouseãcontroller.. at that point you could probably create something to remotely control the computer too. a non-savvy user might choose mirror mode on their own just to avoid losing windows to the invisible desktop lolãã--- Mystic BBS v1.12 A47 2021/12/25 (Windows/32)ã * Origin: cold fusion - cfbbs.net - grand rapids, miã
-
From
fusion@VERT/CFBBS to
fusion on Mon Sep 18 23:56:00 2023
On 18 Sep 2023, fusion said the following...ã ã fu> probably create something to remotely control the computer too. aã fu> non-savvy user might choose mirror mode on their own just to avoidã fu> losing windows to the invisible desktop lolããactually, i think as part of the power saving stuff, when the screens are off the video card will power itself down part way and windows sees no monitors connected.. the usb-c display might be the last one left and get everything anyways.. ;)ãã--- Mystic BBS v1.12 A47 2021/12/25 (Windows/32)ã * Origin: cold fusion - cfbbs.net - grand rapids, miã
-
From
poindexter FORTRAN@VERT/REALITY to
Digital Man on Tue Sep 19 08:08:00 2023
Digital Man wrote to Nelgin <=-ãã > 8. Plug it into a spare, non-internet connected computer without a hardã > drive running Linux from a CD with a BIOS likely too old to be infectable.ãã DM> And Bang! 5 seconds later the computer smokes and catches fire. Wrongã DM> answer!ãã Mine does that all the time anyways, USB or no USB. :)ããã... Ask people to work against their better judgementã--- MultiMail/Win v0.52ã þ Synchronet þ .: realitycheckbbs.org :: scientia potentia est :.ã
-
From
MRO@VERT/BBSESINF to
all on Tue Sep 19 22:27:19 2023
Re: Re: You find a USB stick on the ground in public, what do you do?ã By: poindexter FORTRAN to Digital Man on Tue Sep 19 2023 08:08 amãã > -=> Digital Man wrote to Nelgin <=-ã >ã > > 8. Plug it into a spare, non-internet connected computer without a hardã > > drive running Linux from a CD with a BIOS likely too old to beã > > infectable.ã >ã > DM> And Bang! 5 seconds later the computer smokes and catches fire. Wrongã > DM> answer!ã >ã > Mine does that all the time anyways, USB or no USB. :)ã >ã >ã > ... Ask people to work against their better judgementããif i find a usb stick first thing i do is destroy it.ãi'm protecting myself and that person from harm.ã---ã þ Synchronet þ ::: BBSES.info - free BBS services :::ã
-
From
Arelor@VERT/PALANTIR to
Nelgin on Wed Sep 20 18:09:59 2023
Re: You find a USB stick on the ground in public, what do you do?ã By: Nelgin to Digital Man on Mon Sep 18 2023 09:39 pmãã > Re: You find a USB stick on the ground in public, what do you do?ã > By: Digital Man to on Sun Sep 17 2023 14:57:04ã > ã > > (it's not your USB stick and you don't know where it came from)ã > ã > 8. Plug it into a spare, non-internet connected computer without a hard driv > ---ã > þ Synchronet þ End Of The Line BBS - endofthelinebbs.comããMeh, then its concealed capacitor blows your motherboard up.ããI think some USB 3.x hubs allow direct memory access to USB devices, which isãugly as heck. How direct memory access became a thing for pluggable devicesãmakes the people who had the idea deserving of a slow public execution.ãã--ã
gopher://gopher.richardfalken.com/1/richardfalkenãã---ã þ Synchronet þ Palantir BBS * palantirbbs.ddns.net * Pensacola, FLã
-
From
Nelgin@VERT/EOTLBBS to
Digital Man on Wed Sep 20 21:38:03 2023
Re: You find a USB stick on the ground in public, what do you do?ã By: Digital Man to Nelgin on Mon Sep 18 2023 20:46:36ãã > And Bang! 5 seconds later the computer smokes and catches fire. Wrongã > answer! --ããCan throw ashes in the trash rather than have to take it to recycling. nelgin for the win!ã---ã þ Synchronet þ End Of The Line BBS - endofthelinebbs.comã
-
From
The Lizard Master@VERT/NITEEYES to
Nightfox on Thu Sep 28 13:09:36 2023
Re: You find a USB stick on the ground in public, what do you do?ã By: Nightfox to Digital Man on Sun Sep 17 2023 06:52 pmãã > DM> (it's not your USB stick and you don't know where it came from)ã >ã > hmm.. DDMsgReader seems to be one off on voting on polls now (I know itã > used to be correct); I intended to vote for throwing it into the trash can,ã > but it looks like it registered my vote as plugging it into a Wal-Martã > computer.ã >ã > I don't think I'd want to plug a random USB stick into any computer, unlessã > it was just a spare test computer and not connected to the internet (since Iã > don't know what's on it). I'd wonder if someone might have malicious intentã > by leaving a USB stick somewhere, but I doubt the police would want to spendã > their time on it.ããSome CISOs like to leave them randomly so they can catch people plugging them in.ãã---TLMãã---ã þ Synchronet þ I filled this out to keep people from complaining...ã
-
From
Nightfox@VERT/DIGDIST to
The Lizard Master on Fri Sep 29 09:21:47 2023
Re: You find a USB stick on the ground in public, what do you do?ã By: The Lizard Master to Nightfox on Thu Sep 28 2023 01:09 pmãã >> I don't think I'd want to plug a random USB stick into any computer, unlessãã TL> Some CISOs like to leave them randomly so they can catch people pluggingã TL> them in.ããWhat is a CISO?ããNightfoxãã---ã þ Synchronet þ Digital Distortion: digitaldistortionbbs.comã
-
From
The Lizard Master@VERT/NITEEYES to
Nightfox on Fri Sep 29 14:10:47 2023
Re: You find a USB stick on the ground in public, what do you do?ã By: Nightfox to The Lizard Master on Fri Sep 29 2023 09:21 amãã > TL> Some CISOs like to leave them randomly so they can catch peopleã > TL> plugging them in.ã >ã > What is a CISO?ããChief Information Security Officerãã---TLMãã---ã þ Synchronet þ I filled this out to keep people from complaining...ã
-
From
Tracker1@VERT/TRN to
Digital Man on Sun Oct 1 16:15:59 2023
Re: You find a USB stick on the ground in public, what do you do?ã By: Digital Man to Nightfox on Sun Sep 17 2023 20:22:11ãã DM> There's more than just the 'autorun' of malware to be concerned about.ãã DM> But yeah, you should fix that voting problem. Walmart would appreciate it.ã DM> :-)ãã"The county is responsible for securing the machines, it's not our job."ããI won't go into, or list any specific issues. That said, I don't work for the company that made the on-demand printers used in Maricopa county and others anymore. All said, I am more skeptical of election integrity than most.ã ã ã-- ãMichael J. Ryan ã+o roughneckbbs.com ã
tracker1@roughneckbbs.comãã---ã þ Synchronet þ Roughneck BBS - roughneckbbs.comã
-
From
Tracker1@VERT/TRN to
fusion on Sun Oct 1 16:23:59 2023
Re: Re: You find a USB stick on the ground in public, what do you do?ã By: fusion to Nelgin on Mon Sep 18 2023 23:48:00ãã fu> there's lots of creepy stuff that maybe hasn't been done yet.. for exampleã fu> a usb-c device that pretended to be a monitor could be fed everything youã fu> do.. assuming you managed to put the pc into 'mirror mode' .. somethingã fu> you might be able to automate by also making the usb stick include aã fu> keyboard/mouse controller.. at that point you could probably createã fu> something to remotely control the computer too. a non-savvy user mightã fu> choose mirror mode on their own just to avoid losing windows to theã fu> invisible desktop lolããThere's lots of creepy stuff that *has* been done. You can do an HID as well as small storage and even a wireless network adapter. If the device being plugged into is unlocked, and you know the OS in question, there's quite a bit you can do.ããFor a system I had concerns about, I actually wanted to have a second sealed system with only a serial interface externally with a write-only log to at least track any potential security issues... But, what could go wrong with systems running windows, software that has plain text database passwords available to non-admin accounts and ballot PDF files that aren't even cryptographically signed. And so what if these systems were actually deployed on systems that aren't the systems tested on... and no big deal if configurations were changed the night before and morning of the election...ãã"Most secure election in US history."ã ã ã-- ãMichael J. Ryan ã+o roughneckbbs.com ã
tracker1@roughneckbbs.comãã---ã þ Synchronet þ Roughneck BBS - roughneckbbs.comã
-
From
Tracker1@VERT/TRN to
poindexter FORTRAN on Sun Oct 1 16:25:47 2023
Re: Re: You find a USB stick on the ground in public, what do you do?ã By: poindexter FORTRAN to Digital Man on Tue Sep 19 2023 08:08:00ãã DM>> And Bang! 5 seconds later the computer smokes and catches fire.ã DM>> Wrong ã DM>> answer!ãã PF> Mine does that all the time anyways, USB or no USB. :)ããNo joke, a friend's first experience with a USB keyboard mid 90's, the interface melted/smoked... he wouldn't do anything with USB for half a decade after that.ã ã ã-- ãMichael J. Ryan ã+o roughneckbbs.com ã
tracker1@roughneckbbs.comãã---ã þ Synchronet þ Roughneck BBS - roughneckbbs.comã
-
From
Ewing@VERT/MORTAL to
The Lizard Master on Tue Oct 3 10:16:32 2023
Re: You find a USB stick on the ground in public, what do you do?ã By: The Lizard Master to Nightfox on Thu Sep 28 2023 01:09 pmãã TL> Some CISOs like to leave them randomly so they can catch people pluggingã TL> them in.ããI used to occasionally "drop" them in the office carpark and go tap people on the shoulder when they'd be plugged into a work PC. People can't resist the temptation of a random USB drive.ãã---ã þ Synchronet þ Mortal BBS - Blue Mountains, Australia - bbs.mortalbbs.com:23ã
-
From
MRO@VERT/BBSESINF to
Ewing on Mon Oct 2 20:30:21 2023
Re: You find a USB stick on the ground in public, what do you do?ã By: Ewing to The Lizard Master on Tue Oct 03 2023 10:16 amãã > Re: You find a USB stick on the ground in public, what do you do?ã > By: The Lizard Master to Nightfox on Thu Sep 28 2023 01:09 pmã >ã > TL> Some CISOs like to leave them randomly so they can catch peopleã > TL> plugging them in.ã >ã > I used to occasionally "drop" them in the office carpark and go tap peopleã > on the shoulder when they'd be plugged into a work PC. People can't resistã > the temptation of a random USB drive.ããnot much work to do , eh?ã---ã þ Synchronet þ ::: BBSES.info - free BBS services :::ã
-
From
Nopants@VERT/CITBBS to
Digital Man on Tue Oct 3 18:06:00 2023
Re: You find a USB stick on tã By: Digital Man to Nelgin on Mon Sep 18 2023 09:46 pmãã > And Bang! 5 seconds later the computer smokes and catches fire. Wrong answerããand you notice that you have turned into a pile of dust. How, I can't imagine.ããã---ã þ Synchronet þ The Crack in Time BBS - crackintimebbs.ddns.net:2323ã
-
From
Margaerynne@VERT/PALANTIR to
Nopants on Mon Oct 9 20:45:02 2023
Re: You find a USB stick on tã By: Nopants to Digital Man on Tue Oct 03 2023 06:06 pmãã > and you notice that you have turned into a pile of dust. How, I can't imagine.ãã *** YOU HAVE DIED ***ãã Would you like to (u)ndo your previous action, or (r)estart?ãã---ã þ Synchronet þ Palantir BBS * palantirbbs.ddns.net * Pensacola, FLã