Openwall GNU/*/Linux - a small security-enhanced Linux distro for servers
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Thu, 22 Aug 2019 18:02:14 +0000
From: Jeremy Stanley <fungi@...goth.org>
To: oss-security@...ts.openwall.com
Subject: Re: Linux kernel: multiple vulnerabilities in the USB
 subsystem x2

On 2019-08-22 13:57:53 -0400 (-0400), Perry E. Metzger wrote:
> > Are these even realistic?   If I'm going to leave malicious
> > USB devices in the parking lot for mischief am I going to rely
> > on the unknown victim running a Linux distro with the
> > requisite kernel modules or am I going to just drop a cheap
> > and near-universal USB killer?
> 
> Android phones run Linux. People routinely plug those phones in to USB
> charging stations in airports, on airplanes, at booths in public
> places, etc.

Exploitation of which is commonly referred to as "juice jacking"[*]
and has led to a booming demand for "USB condoms" lately.

[*] https://en.wikipedia.org/wiki/Juice_jacking
-- 
Jeremy Stanley

Download attachment "signature.asc" of type "application/pgp-signature" (964 bytes)

Powered by blists - more mailing lists

Your e-mail address:

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.