Introducing the USB Stick of Death • Hacker News Board

Re: Introducing the USB Stick of Death

#31

Post by dhugiaskmak » Mon, Oct 22, 2012, 5:59 PM UTC

GFischer wrote: post #27

mikemarotti wrote: post #15

Earlier quoted context omitted.

Hiren's BootCD is exactly the kind of tool I've been looking for - but I can't find the download link on that page. Am I an idiot, or does he not host his own boot cd on his site?

He probably doesn't because it contains non-free software. http://en.wikipedia.org/wiki/Hiren%27s_BootCD Wikipedia links to this download location: http://www.hirensbootcd.org/download/ My coworker says he found it on Argentinean site Taringa! ( http://www.taringa.net ), which has had it's brushes with copyright infringement in the past as well.

Working Wikipedia link: http://en.wikipedia.org/wiki/Hiren%27s_BootCD

Re: Introducing the USB Stick of Death

#32

Post by GFischer » Mon, Oct 22, 2012, 6:08 PM UTC

dhugiaskmak wrote: post #31

GFischer wrote: post #27

Earlier quoted context omitted.

He probably doesn't because it contains non-free software. http://en.wikipedia.org/wiki/Hiren%27s_BootCD Wikipedia links to this download location: http://www.hirensbootcd.org/download/ My coworker says he found it on Argentinean site Taringa! ( http://www.taringa.net ), which has had it's brushes with copyright infringement in the past as well.

Working Wikipedia link: http://en.wikipedia.org/wiki/Hiren%27s_BootCD

Thanks, edited the original.

Re: Introducing the USB Stick of Death

#33

Post by nitrogen » Mon, Oct 22, 2012, 6:19 PM UTC

bashzor wrote: post #23

chuppo wrote: post #6

Earlier quoted context omitted.

Post a stacktrace? You can take a photo for us of the kernel panic.

It doesn't crash (no kernel panic), just makes the system so slow that you can't use it anymore until you pull the stick out.

I've seen a feature phone do this as well, when "powered off" in charging-only mode.

Re: Introducing the USB Stick of Death

#34

Post by StavrosK » Mon, Oct 22, 2012, 8:28 PM UTC

chuppo wrote: post #19

robk wrote: post #16

Earlier quoted context omitted.

Understood, but to fully _exploit_ the vulnerability one would need to actually execute more code than just triggering the vulnerability presumably.

You appear to not understand the concepts you are attempting to participate in a discussion about. To "trigger" the vulnerability is to deliver your exploit code. This USB stick can be inserted into any Windows 7 system and, voila you have your rootkit on that machine, without any user interaction required. No running of .exe files anywhere. You could put some pictures on the usb drive for the user to look at while h…

> You appear to not understand the concepts you are attempting to participate in a discussion about.

I would be more demure. This way, it wouldn't look this bad when I'm wrong.

Re: Introducing the USB Stick of Death

#35

Post by drivebyacct2 » Tue, Oct 23, 2012, 6:45 AM UTC

bashzor wrote: post #23

chuppo wrote: post #6

Earlier quoted context omitted.

Post a stacktrace? You can take a photo for us of the kernel panic.

It doesn't crash (no kernel panic), just makes the system so slow that you can't use it anymore until you pull the stick out.

Oh hey, I had one of those too. I eventually smashed it and threw it out because I tired of plugging it in and having slow down problems.

(I noticed it first when I was working with the jump drive and had the system grind to a halt. Removed the drive and it immediately unfroze. further testing confirmed)