Hacker News Reader

You know, I've heard so many variations of those "USB drives in the parking lot" stories, I wonder if that isn't a cover for something else. Or maybe just someone covering their asses and not willing to take blame for something else.

"USB drives in the parking lot" could be the tech industry's Korean fan death.

View on HN

> In one test of how well a USB scam can work, Trustwave planted five USB drives decorated with the targeted company’s logos in the vicinity of the organization’s building. Two of the five “lost & found” drives were opened at the organization. One of the openings even enabled the researchers to glimpse software employed to control the organization’s physical security. https://www.redteamsecure.com/blog/usb-drop-attacks-the-dang...

They are used to great effect in pentesting. I think it's natural to see a drive and think "Oh no, I need to get this back to a coworker."

I have a friend who does pentesting and she collects many cool and interesting looking usb flash drives for this very purpose. She says "60% of the time, it works every time."

Reply on news.ycombinator.com