BadUSB: What you can do about undetectable malware on a flash drive





After reading about BADUSB, Barbara asked if it was safe to share files through a flash drive. “Would we be safer using a cloud service?”
A cloud service might be safer than a flash drive, although that has its own dangers. BadUSB shows us that malware can infect and reside in a flash drive’s firmware, which your antivirus program can’t scan the way it can scan the drive’s main storage. It’s like having the malware in your motherboard’s BIOS—except that this motherboard will likely get plugged into multiple computers.
As far as we know, as I write this, BadUSB is not yet malware. It’s an experiment intended to prove this sort of thing can happen and that we need to protect ourselves.
But if it were malicious, it could trick your PC into thinking it’s a USB keyboard, and then tell it to download something bad. It could take over your DNS settings and send you to the wrong websites.
Luckily, your antivirus software would probably catch and block this sort of activity . But that’s probably, not definitely.
Better flash drives would fix the problem. Irony key its drives use digitally signed code, which makes it impossible for anyone else to change the firmware.
If IronKey is correct, and if other companies follow their lead, the problem will go away…eventually.
In the meantime, here’s what you can do to protect yourself:
  1. Don’t share flash drives. Stick with the cloud for file sharing.
  2. Follow the general rules of PC security: an up-to-date antivirus, a firewall, Web protection, and so on.
  3. Let the manufacturers know that you want BadUSB-immune portable storage.

Comments

Post a Comment

Popular posts from this blog

How to buy the perfect PC gaming laptop

Image
Desktop diehards and the Reddit build-it crowd might scoff at the very concept of a portable PC gaming machine, but the gulf between gaming desktops and gaming laptops has narrowed considerably over the years. Today’s laptops can play modern games at 1080p and higher with few to no compromises in graphics settings. And that's not bad. Sure, traditional desktop PCs offer more expansion options and easier upgrade paths, and can be significantly cheaper for the performance you get. But there's no denying the appeal of a single, self-contained gaming machine that you can move from the living room to the dining room to even the back porch. You just need to pick your gaming laptop wisely. Your decisions will key into a series of component choices, so let's dig into them, one by one. GPU: Your 3D graphics engine NVIDIA A gaming laptop's number one component should always be the GPU, such as Nvidia's new GeForce GTX 980M. Modern games are all about 3D graphic
Read more

Second-gen Chromecast tipped with faster Wi-Fi, Spotify support, and more

Image
Two new Nexus phones aren’t the only items expected at Google’s press event on September 29. Google’s also gearing up to introduce a second-generation Chromecast, according to 9to5Google. The new streaming device is expected to come in a round shape loaded with improved Wi-Fi, a new feature called Fast Play, support for audio systems, and feed integration with the device’s main screen. That’s about where the details end, however, as specifics are in short supply. The current Chromecast uses 802.11 a/b/g/n Wi-Fi, so it sounds like the next version will support the newer 802.11 ac Wi-Fi, but that’s just speculation at this point. The Fast Play feature apparently means the next Chromecast will connect faster than the original version when you “cast” something from your mobile device. As for the feeds, there’s no word on what this is. 9to5Google figures it means you’ll be able to integrate social media feeds when the Chromecast flips to its idle backdrop mode. Backdrop
Read more

Bloatware: Why computer makers fill your PC with junk, and how to get rid of it

Image
Bloatware, crapware, shovelware: No matter what you call it, the junk that PC makers dump onto new PCs is nothing short of a mess. The situation was thrust into the spotlight last week when it was revealed that several Lenovo PCs were preloaded with “Superfish” adware that actively left users vulnerable to attack. The software compromised secure HTTPS web connections in a quest to inject ads on the sites you visit... and make Lenovo a few nickels. There’s no doubt about it: Even though the root vulnerability came from Superfish, Lenovo messed up. Hard . This shouldn’t have happened, period. But Lenovo didn’t toss its users to the wolves out of malice—instead, the Superfish debacle is a natural extension of the entire bloatware epidemic. Why do hardware vendors knowingly stuff new PCs with junk that makes your experience worse? And what can you do about it? Let’s dig in. Dolla dolla bills y’all Bloatware exists because we’re all cheap bastards, and rightfully so.
Read more