[Noisebridge-discuss] usb 'dead drops' at noisebridge?

[Mitch Altman]

From: maltman23 at hotmail.com
To: emprameen at gmail.com; embeddedlinuxguy at gmail.com
Date: Sun, 31 Oct 2010 12:58:03 -0700
CC: noisebridge-discuss at lists.noisebridge.net
Subject: Re: [Noisebridge-discuss] usb 'dead drops' at noisebridge?




Date: Sun, 31 Oct 2010 12:35:56 -0700
Subject: Re: [Noisebridge-discuss] usb 'dead drops' at noisebridge?
From: emprameen at gmail.com
To: embeddedlinuxguy at gmail.com
CC: maltman23 at hotmail.com; noisebridge-discuss at lists.noisebridge.net

I'd be into it. I think the benefit would be greater than the risk for me.



On Sun, Oct 31, 2010 at 12:19 PM, Jesse Zbikowski <embeddedlinuxguy at gmail.com> wrote:


On Sat, Oct 30, 2010 at 9:19 PM, Mitch Altman <maltman23 at hotmail.com> wrote:
> Too bad that there's a high risk of trojans by connecting a Windows computer
> to one (autorun.inf files can run an EXE file upon plugging a USB drive in).


The element of danger actually makes the idea more exciting. You have
to be resourceful enough to mitigate the risks. This is physical
computing at its finest. I would certainly try such a "data glory
hole" if I saw one.
 
 
I'd probably also be way too curious to pass it up.

 
-------------------
 
One (perhaps) interesting side-note: 
 
I plugged a USB drive into a computer at a hotel in Brussels a few weeks ago.  The computer was running Ubuntu.  The next time I plugged the USB drive into my computer I noticed that the "autorun.inf" file was altered, and had some EXE file added to its root directory, ready to be executed.  Seems that people (if one could be so kind as to call them that) are writing software for Linux that is intended to install itself on USB drives that they assume will eventually be plugged into Windows machines.
 
Mitch.
 
  		 	   		  
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.noisebridge.net/pipermail/noisebridge-discuss/attachments/20101031/4d1176ba/attachment-0003.html>