Language Selection

English French German Italian Portuguese Spanish

USB devices offer an old-school way to steal data

Filed under
Security

We've heard a lot recently about data thieves stealing personal data, especially credit card and social security information, through phishing scams and keystroke-logging Trojan horses sent anonymously over the Internet. So it doesn't surprise me that criminal hackers are turning their attention away from the comforts of the Internet and going old school, once again physically infecting target computers by hand. Their method? How about a hardware-based Trojan horse using USB ports?

Plug and root

In a Black Hat talk entitled 'Plug and root: the USB key to the kingdom', researchers Darrin Barrall and David Dewey, both of SPI Dynamics, a security firm, outlined two flaws they found in the way Windows XP drivers handle Universal Serial Bus (USB) devices. The researchers said in July 2005 that both vulnerabilities had been disclosed to Microsoft, but the software giant didn't include patches in its August 2005 security update. The researchers found fault with the way Windows XP drivers handle USB autorun and USB raw sockets.

Full Story.

More in Tux Machines

Massive Ubuntu Touch Update Coming to Phones and Tablets This Summer

We reported the other day that the Ubuntu Touch developers had a great session during the Ubuntu Online Summit for the next major release of the world's most popular free operating system, Ubuntu 15.10 (Wily Werewolf). Read more

Ugoos UM3 TV box dual boots Android and Ubuntu

The Ugoos UM3 is a small box that you can plug into your TV to run Android apps. But unlike most devices that fit that description, this one can also run Ubuntu Linux. That means you could use it to stream videos from YouTube or Netflix, play music from Pandora or Spotify, or play Android games. Then you could reboot the device and switch operating systems to run full desktop apps including LibreOffice and Firefox. Ugoos offers a larger model called the UT3S which sells for about $179. But the Ugoos UM3 costs about $50 less. Read more

4 things governments need to know to adopt open source cloud - Red Hat

Open source cloud platforms, like OpenStack, can allow public sector agencies to connect systems and share data easily. Here are four things governments need to know to make open source cloud a success. Read more

Open source key to preserving human history, argues Vatican

Ammenti explained that, in order for the manuscripts to be readable, the Vatican Library opted for open source tools that do not require proprietary platforms, such as Microsoft Office, to be read. "We save it as a picture as it's longer life than a file. You don't rely on PowerPoint or Word. In 50 years they can still just look at it," he said. Read more