Author Topic: why stupid things like the usb-killer do exist?  (Read 3171 times)

0 Members and 1 Guest are viewing this topic.

Offline MrMobodies

  • Frequent Contributor
  • **
  • Posts: 811
  • Country: gb
Re: why stupid things like the usb-killer do exist?
« Reply #50 on: May 07, 2019, 05:35:41 pm »
Quote
not going to defend the guy but, 10 years in prison and a $250,000 fine is beyond insane
Out of curiosity, what would be an appropriate punishment?

Insane how it will cost the state for his stay in prison for 10 years.

As well as paying compensation for the inconvenience they should get get him repair/replace what he damaged out of his own pocket of course.
 

Offline Nominal Animal

  • Super Contributor
  • ***
  • Posts: 1716
  • Country: fi
    • My home page and email address
Re: why stupid things like the usb-killer do exist?
« Reply #51 on: May 07, 2019, 05:50:44 pm »
like Xterminals made in the 90s.
Many of them ran only the X server on the terminal, and the applications themselves on bigger iron (i.e, as "thin clients").  The difference to what I am suggesting is that the machine runs everything locally, from a ramdisk.  But otherwise, yes: nothing new.  It's just that having big-mem embedded machines would make that so much better.  The CPUs are easily powerful enough already.
 

Offline ejeffrey

  • Super Contributor
  • ***
  • Posts: 2119
  • Country: us
Re: why stupid things like the usb-killer do exist?
« Reply #52 on: May 07, 2019, 05:55:29 pm »
They have a legitimate use which is basically destroying your kit and the TPM in and crypto keys irrecoverably and permanently. No amount of fancy shit down the lab can fix the damage it does. Think journalists, spies, activists, data exfiltration protection, hardware sanitisation etc.

Not in the slightest.  A device like this _might_ take out a TPM -- or any other particular chip in a system, but is certainly not guaranteed.  What chips are likely to be destroyed is going to heavily depend on the layout and design.  If you want to destroy a TPM, use a widlarizer.

Really all this is good for is testing if USB devices can withstand high voltage capacitive discharge.  But there are better and more reproducible ways to do that.  It is also a demonstration of a simple high voltage boost converter -- which doesn't have to be hooked up to a USB circuit to demonstrate its effectiveness.
 

Offline apis

  • Super Contributor
  • ***
  • Posts: 1667
  • Country: se
  • Hobbyist
Re: why stupid things like the usb-killer do exist?
« Reply #53 on: May 07, 2019, 09:18:24 pm »
why? because the firewire tecnology directly exposes the ram via DMA. so, if someone put a FW-device on the chain, it can potentially write/read the ram, or just write junk to crash the system.
Yeah, I knew a paranoid guy who put hot melt glue in all his firewire ports.
 

Online bd139

  • Super Contributor
  • ***
  • Posts: 14961
  • Country: gb
Re: why stupid things like the usb-killer do exist?
« Reply #54 on: May 07, 2019, 09:42:54 pm »
He's not paranoid really.

When I worked in the defence sector the PCs were locked in cages with a hole big enough for a finger to turn them on and that was it.  At a large financial I was working for a few months back they epoxied all the holes solid. At the same time idiots wedged security doors open with plant pots so they didn't have to swipe in after they went for a slash.

On TPM disposal, I concede. I wouldn't do it that way either
 

Offline coppercone2

  • Super Contributor
  • ***
  • Posts: 3922
  • Country: us
  • $
Re: why stupid things like the usb-killer do exist?
« Reply #55 on: May 08, 2019, 04:22:04 am »
is that heaven? tech support takes 4 hours to open the computer with a angle grinder when the mouse gets loose? welded shut I hope?? :popcorn:
\
sounds a bit depressing, like your working out of a subway station designed to be vandal proof from the occasional evil hobo.. not a office
« Last Edit: May 08, 2019, 04:29:11 am by coppercone2 »
 

Online bd139

  • Super Contributor
  • ***
  • Posts: 14961
  • Country: gb
Re: why stupid things like the usb-killer do exist?
« Reply #56 on: May 08, 2019, 07:47:24 am »
No just caged and locked with a padlock. Occasionally they actually lost the key for the specific box so had to get some bolt cutters out.  :-DD

Heaven was an incumbent rubbish IT team which I was part of. Didn’t take long to get to the top and out of the door to a better place to work.
 

Offline CJay

  • Super Contributor
  • ***
  • Posts: 3547
  • Country: gb
Re: why stupid things like the usb-killer do exist?
« Reply #57 on: May 08, 2019, 08:52:52 am »
I've worked in 'interesting' places before now, USB security is a done deal if you know what you're doing and invest the right money, it's possible to lock down a machine as soon as you plug in a different keyboard or any other non whitelisted device.

Makes it fun when 'Dave' plugs his phone in to charge.

Physical security is always worth having too, if for nothing else than to make it obvious that people shouldn't be messing about with the machines.

Concur on the 'wedged' doors, I've seen all sorts of methods and justifications for bypassing security, all of which would have caused havoc if they'd been spotted by someone in security
 

Offline ebastler

  • Super Contributor
  • ***
  • Posts: 3516
  • Country: de
Re: why stupid things like the usb-killer do exist?
« Reply #58 on: May 18, 2019, 05:43:27 am »
moral of the story: close all the physical ports with mini-padlocks ( dunno if they actually exist, but if they exist, then they are the best invention ever, and I want twelve of them!)

Physical locks are indeed available, at least for USB ports:
https://www.kensington.com/p/products/security/usb-port-locks/usb-port-blocker/
 

Offline coppercone2

  • Super Contributor
  • ***
  • Posts: 3922
  • Country: us
  • $
Re: why stupid things like the usb-killer do exist?
« Reply #59 on: May 18, 2019, 04:56:43 pm »
that looks like it would get picked easily
 

Online bd139

  • Super Contributor
  • ***
  • Posts: 14961
  • Country: gb
Re: why stupid things like the usb-killer do exist?
« Reply #60 on: May 18, 2019, 05:30:58 pm »
Hammer and slot screwdriver.
 


Share me

Digg  Facebook  SlashDot  Delicious  Technorati  Twitter  Google  Yahoo
Smf