Saturday, July 11, 2015

usb - Does the BadUSB issue also affect SD cards?


Since I've heard about the BadUSB issue where the firmware of a USB stick can be maliciously changed, I was thinking about ways to avoid this issue.


Would using SD cards as an alternative to USB sticks (given that all computers I use have card readers) avoid this issue?


I realize that these card readers would still be susceptible to hardware destruction but I am more concerned about software.


Answer



To a point, it's safer. But sd cards are turning more into usb everyday.


Sd cards will still be vulnerable to having viruses on them, and a user clicking on the program to launch them. I don't see them being used as hid (human interface devices) yet, so you should be safe in that regard.


Having said that, what is your potential attack vector? Are you sharing the sd cards or usb flash drives with other people (strangers or known people, alike)? If you are the sole user and will maintain complete control of the flash drives, then I would not worry about it.


No comments:

Post a Comment

linux - How to SSH to ec2 instance in VPC private subnet via NAT server

I have created a VPC in aws with a public subnet and a private subnet. The private subnet does not have direct access to external network. S...