Bad USB Bug

Big Sarge · 08-01-2014, 01:47 AM

yes. this is why all usb's on military computers were disabled several years ago. viruses were introduced on siprnet from infected jump drives. you could loose your security clearance and rank if you got caught with a thumb drive in the scif

xoxoxoBruce · 08-01-2014, 11:00 AM

I think that's a different problem, a virus on a thumb/flash drive infecting a computer. I'm wondering if the computer can alter the firmware on the USB device.

mbpark · 08-11-2014, 10:45 AM

The policy control of losing rank/clearance is appropriate given the severity of the bug.

This is because much more nefarious items than viruses can be brought into a SCIF due to this.

This bug is really bad because it can use the USB ID assigned to one device and operate surreptitiously as another, e.g. data collection and surveillance by operating as a keyboard and running scripts to remove data from a machine.

08-01-2014, 01:47 AM	#1
Big Sarge Werepandas - lurking in your shadows Join Date: Jun 2008 Location: In the Deep South Posts: 3,408	yes. this is why all usb's on military computers were disabled several years ago. viruses were introduced on siprnet from infected jump drives. you could loose your security clearance and rank if you got caught with a thumb drive in the scif __________________ Give a man a match, & he'll be warm for 20 seconds. But toss that man a white phosphorus grenade and he'll be warm for the rest of his life.

08-01-2014, 11:00 AM	#2
xoxoxoBruce The future is unwritten Join Date: Oct 2002 Posts: 71,105	I think that's a different problem, a virus on a thumb/flash drive infecting a computer. I'm wondering if the computer can alter the firmware on the USB device. __________________ The descent of man ~ Nixon, Friedman, Reagan, Trump.

08-11-2014, 10:45 AM	#3
mbpark Lecturer Join Date: Jan 2001 Location: Carmel, Indiana Posts: 761	BadUSB The policy control of losing rank/clearance is appropriate given the severity of the bug. This is because much more nefarious items than viruses can be brought into a SCIF due to this. This bug is really bad because it can use the USB ID assigned to one device and operate surreptitiously as another, e.g. data collection and surveillance by operating as a keyboard and running scripts to remove data from a machine.

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)