Live data from Hacker News

Former student destroys 59 university computers using USB Killer device

zdnet.com

41–50 of 224 posts

Re: Former student destroys 59 university computers using USB Killer device

#41
post #30

Earlier quoted context omitted.

I don't buy the pen testing part. I might as well sell a hammer and call it a pen testing device. Funny enough they have the following on their website: "A hammer used maliciously can permanently damage to a third party's device. The USB Killer, used maliciously, can permanently damage a third party's device." Contrary to this device a hammer can be used a useful tool too.

It's designed to prove a point. To prove that USB devices can be malicious. It's probably most useful as an education tool, training staff not to plug random USB devices they find lying around the parking lot into their computers.

Might make sense, yeah. How many computers would get blown up during such a test, and how much productivity would be lost and how much money would it cost? What is the expected cost of a major breach or malware infection? How much less likely does a breach or malware infection become as a result of leaving one of these laying around? I actually wouldn't be surprised if leaving these did come out positive, in much the same way that regular fire drills come out positive.

Re: Former student destroys 59 university computers using USB Killer device

#43
post #39
post #30

Earlier quoted context omitted.

It's designed to prove a point. To prove that USB devices can be malicious. It's probably most useful as an education tool, training staff not to plug random USB devices they find lying around the parking lot into their computers.

It's like hiring a gunman to start shooting up your office to train people about the dangers of social engineering, to prove that some people shouldn't be trusted.

Bad choice as an example of social engineering, not funny, and doesn’t make sense at all.

Re: Former student destroys 59 university computers using USB Killer device

#44
post #38
post #20

Earlier quoted context omitted.

"-200VDC is discharged over the data lines of the host device. This charge/discharge cycle is repeated many times per second, until the USB Killer is removed" Is there any device that is supposed to survive this? In other news, throwing your computer in a fire also reveals a serious vulnerability.

You'd need opto-isolated data lines. I can't see any common devices having that.

Newer Apple devices should be protected.

Re: Former student destroys 59 university computers using USB Killer device

#46

Earlier quoted context omitted.

I've never heard of TV-B-Gone. > During the 2008 Consumer Electronics Show, an individual associated with Gizmodo brought a TV-B-Gone remote control and shut off many display monitors at booths and during demos affecting several companies. These actions caused the individual to be banned for life from future CES events. https://en.wikipedia.org/wiki/TV-B-Gone

The innocuous use of TV-B-Gone devices was to shut off at once all TV sets at malls; it was rather a prank than a destructive act, with the added benefit of getting some peace.

Was there a TV-come-on to turn on the mall TVs in the morning?

Re: Former student destroys 59 university computers using USB Killer device

#47
post #38
post #20

Earlier quoted context omitted.

"-200VDC is discharged over the data lines of the host device. This charge/discharge cycle is repeated many times per second, until the USB Killer is removed" Is there any device that is supposed to survive this? In other news, throwing your computer in a fire also reveals a serious vulnerability.

You'd need opto-isolated data lines. I can't see any common devices having that.

Would that even meet the USB spec? You could isolate the entire USB module, but I don't think you can just isolate the data lines.

And you'd still have to deal with the big spikes coming in on the USB power pins.

Re: Former student destroys 59 university computers using USB Killer device

#48
post #39

Earlier quoted context omitted.

It's like hiring a gunman to start shooting up your office to train people about the dangers of social engineering, to prove that some people shouldn't be trusted.

Bad choice as an example of social engineering, not funny, and doesn’t make sense at all.

I don't think that it was a joke or made in bad faith - rather to demonstrate the logical extreme.

Essentially that the logical extreme of dropping computer-destroying USBs to demonstrate that one shouldn't plug strange USBs in the first place is akin to destroying an office that you talked yourself into to prove that you shouldn't have been let in in the first place. Perhaps "shooting up" was a tad too far, but with charity it's a reasonable point nonetheless.

Re: Former student destroys 59 university computers using USB Killer device

#49
post #42

College of St Rose lists their tuition as $29,826/yr. So he did about 2 tuition years of damage. I wonder if he was worked up about student loan debt.

I'm guessing he's a rich kid from India, with rich parents who are bankrolling his education.

I hope he gets the full 10 years. Nothing like the US Penitentiary System to teach you a lesson.

Post reply on HN