• You find a USB stick on the ground in public, what do you do?
• (it's not your USB stick and you don't know where it came from)
• 1) Take it home and plug it into my personal computer
  15
• 2) Take it work and plug it into my work computer
  5
• 3) Take it to Walmart and plug it into a computer for sale
  31
• 4) Pick it up and throw it in a trash bin
  8
• 5) Give it away as a gift
  1
• 6) Call the police
  0
• 7) Nothing
  6
•  
  You cannot vote on this poll.

Re: You find a USB stick on the ground in public, what do you do?
By: Nightfox to The Lizard Master on Fri Sep 29 2023 09:21 am

Some CISOs like to leave them randomly so they can catch people plugging them in.

What is a CISO?

Chief Information Security Officer

---TLM

---
þ Synchronet þ I filled this out to keep people from complaining...

Re: You find a USB stick on the ground in public, what do you do?
By: Digital Man to Nightfox on Sun Sep 17 2023 20:22:11

There's more than just the 'autorun' of malware to be concerned about.

But yeah, you should fix that voting problem. Walmart would appreciate it. :-)

"The county is responsible for securing the machines, it's not our job."

I won't go into, or list any specific issues. That said, I don't work for the company that made the on-demand printers used in Maricopa county and others anymore. All said, I am more skeptical of election integrity than most.


--
Michael J. Ryan
+o roughneckbbs.com
tracker1@roughneckbbs.com

---
þ Synchronet þ Roughneck BBS - roughneckbbs.com

Re: Re: You find a USB stick on the ground in public, what do you do?
By: fusion to Nelgin on Mon Sep 18 2023 23:48:00

there's lots of creepy stuff that maybe hasn't been done yet.. for example a usb-c device that pretended to be a monitor could be fed everything you do.. assuming you managed to put the pc into 'mirror mode' .. something you might be able to automate by also making the usb stick include a keyboard/mouse controller.. at that point you could probably create something to remotely control the computer too. a non-savvy user might choose mirror mode on their own just to avoid losing windows to the invisible desktop lol

There's lots of creepy stuff that *has* been done. You can do an HID as well as small storage and even a wireless network adapter. If the device being plugged into is unlocked, and you know the OS in question, there's quite a bit you can do.

For a system I had concerns about, I actually wanted to have a second sealed system with only a serial interface externally with a write-only log to at least track any potential security issues... But, what could go wrong with systems running windows, software that has plain text database passwords available to non-admin accounts and ballot PDF files that aren't even cryptographically signed. And so what if these systems were actually deployed on systems that aren't the systems tested on... and no big deal if configurations were changed the night before and morning of the election...

"Most secure election in US history."


--
Michael J. Ryan
+o roughneckbbs.com
tracker1@roughneckbbs.com

---
þ Synchronet þ Roughneck BBS - roughneckbbs.com

Re: Re: You find a USB stick on the ground in public, what do you do?
By: poindexter FORTRAN to Digital Man on Tue Sep 19 2023 08:08:00

And Bang! 5 seconds later the computer smokes and catches fire.
Wrong
answer!

Mine does that all the time anyways, USB or no USB. :)

No joke, a friend's first experience with a USB keyboard mid 90's, the interface melted/smoked... he wouldn't do anything with USB for half a decade after that.


--
Michael J. Ryan
+o roughneckbbs.com
tracker1@roughneckbbs.com

---
þ Synchronet þ Roughneck BBS - roughneckbbs.com

Re: You find a USB stick on the ground in public, what do you do?
By: The Lizard Master to Nightfox on Thu Sep 28 2023 01:09 pm

Some CISOs like to leave them randomly so they can catch people plugging them in.

I used to occasionally "drop" them in the office carpark and go tap people on the shoulder when they'd be plugged into a work PC. People can't resist the temptation of a random USB drive.

---
þ Synchronet þ Mortal BBS - Blue Mountains, Australia - bbs.mortalbbs.com:23

Re: You find a USB stick on the ground in public, what do you do?
By: Ewing to The Lizard Master on Tue Oct 03 2023 10:16 am

Re: You find a USB stick on the ground in public, what do you do?
By: The Lizard Master to Nightfox on Thu Sep 28 2023 01:09 pm

Some CISOs like to leave them randomly so they can catch people plugging them in.

I used to occasionally "drop" them in the office carpark and go tap people on the shoulder when they'd be plugged into a work PC. People can't resist the temptation of a random USB drive.

not much work to do , eh?
---
þ Synchronet þ ::: BBSES.info - free BBS services :::