Hacker News Reader

Comment by speakeron | Hacker News Reader

Not a good idea. This risks getting owned from the BadUSB exploit.

Since the BadUSB exploit is a MITM for data going through the USB interface, it's existence doesn't increase the risk. All the executable files could just be infected to start with.

It's pretty much the worst idea to execute random files you find in the street anyway so the risk probably isn't that high in the first place.

In the article it's said that's explicitly part of the idea - it's supposed to be dangerous.

It's supposed to appear dangerous. The first time anything actually dangerous happened the user would immediately stop using them. Or worse, they'll end up in prison. Copying a random zip file of the Anarchist's Cookbook on to your PC will get you a few hours of questioning by the police and a caution not to be so stupid as to be a pretend spy again; why you downloaded an archive of several thousand child porn pictures is quite a bit harder to explain away as a bit of fun.

> Copying a random zip file of the Anarchist's Cookbook on to your PC will get you a few hours of questioning

Not in the US. I could download a hundred copies from every sketchy warez site on the internet without violating any laws.

Have not broken any laws does not provide any assured protection. And even the laws that are supposed to protect your rights have a long history of being broken, often with little punishment to the breaker.

The same is true here in the UK. It's not a crime to have the file, but it'd be reason enough for the police to request you 'voluntarily' answer some questions about where you got it from and why. If you refuse to answer questions however, then it's a crime.

Since when has it been a crime in the UK to refuse to answer questions from the police?

Is BadUSB possible with any USB stick? ( Or is this only a risk if a modified USB stick was installed in the first place?)

The firmware on a USB peripheral normally isn't write-protected, so it's possible to infect an existing stick.

Thank you, I always thought that one needs special hardware.

Unlikely and preventable, but I'd be more worried about water and other gack in the connector.

Reply on news.ycombinator.com