Specially Crafted Hardware #22

Activity

1. Rafiot commented on Nov 4, 2018

   

   Rafiot

   on Nov 4, 2018

   Member

   More actions

   I guess it depends what you mean by specially crafted. Maybe?
2. wreuven commented on Nov 5, 2018

   

   wreuven

   on Nov 5, 2018

   Author

   More actions

   Simplest example is someone gives you a USB flash drive and when you plug it in, it acts as a keyboard and "types" in a series of commands to do various mischief which can include corrupting the target USB drive.
3. Rafiot commented on Nov 5, 2018

   

   Rafiot

   on Nov 5, 2018

   Last edited by Rafiot

   Member

   More actions

   Oh, yeah, if the firmware of the key is trying to do nasty things, it should be covered, assuming you use the default CIRCLean firmware on a RaspberryPi:

   • It is impossible to login on any user account so anything keyboard related will be stuck on the login screen
   • This piece of code will also make it very difficult for a malicious firmware to give a safe file to the file checker and then give a malicious one when we copy the file over to the other key: https://github.com/CIRCL/PyCIRCLean/blob/master/filecheck/filecheck.py#L242

   👍React with 👍1Reacted by wreuven