A REALLY bad security threat: USB devices

[thewayne]

Yes, USB devices can carry malware, we all know that. This is new and different. Basically, it is not difficult to hack the hardware that controls the USB device, be it memory stick, external hard drive, or possibly smart phone or tablet. Malware injected in to the controller is pretty much undetectable, and if it can't be detected, it can't be

Comments

[silveradept]

So a truly secure computer has no network access, no peripherals, no input other than by a device that cannot be keylogged, its operating system on ROM, and all the secure data similarly on some form of read-only chip?

Which makes it basically useless, I'm guessing.

[thewayne]

That's about the size of it.

[thewayne]

I think what it gets down to is that if someone really Really REALLY wants to get at the data in your systems, there are vectors that can be exploited that you simply cannot defend against.

Defend what you can, and aside from that, about all you can do is Don't Worry, Be Happy.

[silveradept]

True. Presumably, at some point, it becomes more cost-effective to go after someone else.

That said, something like this chain of thought should be a pretty strong reason to be as transparent as possible in your dealings with everyone. If you don't look like you have lots of secrets, and nothing of value, then nobody wants you.