Live data from Hacker News

Former student destroys 59 university computers using USB Killer device

zdnet.com

31–40 of 224 posts

Re: Former student destroys 59 university computers using USB Killer device

#32
post #22

I am looking at https://usbkill.com/ . What is the purpose of the device? The manufacturer calls it an "ESD tester" yet there is an "anonymous" version available: https://usbkill.com/products/usb-killer-v3?variant=447760856...

>The manufacturer calls it an "ESD tester" yet there is an "anonymous" version available plausible deniability. selling devices specifically for committing crimes is illegal. that's why all the bong shops say it's "for tobacco use only".

> that's why all the bong shops say it's "for tobacco use only"

Unless you're in a state that's legalized it.

Re: Former student destroys 59 university computers using USB Killer device

#33

Can someone tell me what would happen if you plug this onto a USB charger via an adaptor that is plugged to 220V AC?

Quite possibly nothing. A USB charger following the USB Battery Charging Specification has a resistor < 200Ω across D+ and D-. Just putting -200 V on D- and doing nothing to D+, there's not a completed circuit. If the charger uses the data lines for anything (e.g. Apple devices), perhaps it'd burn out whatever microcontroller is running things in the charger.

Re: Former student destroys 59 university computers using USB Killer device

#34
post #30

Earlier quoted context omitted.

I don't buy the pen testing part. I might as well sell a hammer and call it a pen testing device. Funny enough they have the following on their website: "A hammer used maliciously can permanently damage to a third party's device. The USB Killer, used maliciously, can permanently damage a third party's device." Contrary to this device a hammer can be used a useful tool too.

It's designed to prove a point. To prove that USB devices can be malicious. It's probably most useful as an education tool, training staff not to plug random USB devices they find lying around the parking lot into their computers.

I would think a USB containing an info graphic about the dangers of plugging in random USBs is a far more efficient education tool than one that destroys the hardware of your staff. Worse, what if they took it home and used it on a personal device?

Re: Former student destroys 59 university computers using USB Killer device

#35
post #6

Earlier quoted context omitted.

They bill it for “pen testers and police” so I would guess it’s really for people who imagine themselves / want to be within that audience. Not to be overly cynical. I suppose some pen testers, or actual CIA type folks might have some need of this type of device... but is that a large enough market?

I don't buy the pen testing part. I might as well sell a hammer and call it a pen testing device. Funny enough they have the following on their website: "A hammer used maliciously can permanently damage to a third party's device. The USB Killer, used maliciously, can permanently damage a third party's device." Contrary to this device a hammer can be used a useful tool too.

When you're holding a hammer, everything looks like a nail!

Re: Former student destroys 59 university computers using USB Killer device

#36
post #30

Earlier quoted context omitted.

I don't buy the pen testing part. I might as well sell a hammer and call it a pen testing device. Funny enough they have the following on their website: "A hammer used maliciously can permanently damage to a third party's device. The USB Killer, used maliciously, can permanently damage a third party's device." Contrary to this device a hammer can be used a useful tool too.

It's designed to prove a point. To prove that USB devices can be malicious. It's probably most useful as an education tool, training staff not to plug random USB devices they find lying around the parking lot into their computers.

>> training staff not to plug random USB devices...

Nothing like some high-consequences IRL training!

Perhaps curricula for the Inspector Clouseau police academy?

Re: Former student destroys 59 university computers using USB Killer device

#38
post #20

I am looking at https://usbkill.com/ . What is the purpose of the device? The manufacturer calls it an "ESD tester" yet there is an "anonymous" version available: https://usbkill.com/products/usb-killer-v3?variant=447760856...

"-200VDC is discharged over the data lines of the host device. This charge/discharge cycle is repeated many times per second, until the USB Killer is removed" Is there any device that is supposed to survive this? In other news, throwing your computer in a fire also reveals a serious vulnerability.

You'd need opto-isolated data lines. I can't see any common devices having that.

Re: Former student destroys 59 university computers using USB Killer device

#39
post #30

Earlier quoted context omitted.

I don't buy the pen testing part. I might as well sell a hammer and call it a pen testing device. Funny enough they have the following on their website: "A hammer used maliciously can permanently damage to a third party's device. The USB Killer, used maliciously, can permanently damage a third party's device." Contrary to this device a hammer can be used a useful tool too.

It's designed to prove a point. To prove that USB devices can be malicious. It's probably most useful as an education tool, training staff not to plug random USB devices they find lying around the parking lot into their computers.

It's like hiring a gunman to start shooting up your office to train people about the dangers of social engineering, to prove that some people shouldn't be trusted.

Re: Former student destroys 59 university computers using USB Killer device

#40
post #6

I am looking at https://usbkill.com/ . What is the purpose of the device? The manufacturer calls it an "ESD tester" yet there is an "anonymous" version available: https://usbkill.com/products/usb-killer-v3?variant=447760856...

They bill it for “pen testers and police” so I would guess it’s really for people who imagine themselves / want to be within that audience. Not to be overly cynical. I suppose some pen testers, or actual CIA type folks might have some need of this type of device... but is that a large enough market?

I mean, it's not like it's expensive to manufacture! One person soldering and maybe a single board and usb plug, its probably easy to make money if you can sell them for $30 or so in the volumes of 100's.
Post reply on HN