{"items": [{"author": "Kelly", "source_link": "https://www.facebook.com/jefftk/posts/659297275852?comment_id=659303852672", "anchor": "fb-659303852672", "service": "fb", "text": "if we're going with physical attacks, it might as well just be a bomb.", "timestamp": "1399994309"}, {"author": "Michael", "source_link": "https://www.facebook.com/jefftk/posts/659297275852?comment_id=659304481412", "anchor": "fb-659304481412", "service": "fb", "text": "rec/alt.aquaria!", "timestamp": "1399994528"}, {"author": "Jim", "source_link": "https://www.facebook.com/jefftk/posts/659297275852?comment_id=659307205952", "anchor": "fb-659307205952", "service": "fb", "text": "It could act as a normal USB storage device, but occasionally modify data put on it. For example, Windows has a system called ReadyBoost which uses USB sticks as fast swap space; if it did that on a malicious USB stick, and swapped out code, then the code it got back might not be the same code it wrote. Also, filesystem drivers have almost as much exploit potential as device drivers.", "timestamp": "1399996584"}, {"author": "Jeff&nbsp;Kaufman", "source_link": "https://www.facebook.com/jefftk/posts/659297275852?comment_id=659307460442", "anchor": "fb-659307460442", "service": "fb", "text": "@Jim: \"filesystem drivers have almost as much exploit potential as device drivers\"<br><br>Good point.  Even if someone simply puts the found flash drive into their computer to see what's on it, trying to return it to the owner, that's a lot of fs reads.", "timestamp": "1399996718"}, {"author": "Jim", "source_link": "https://www.facebook.com/jefftk/posts/659297275852?comment_id=659309551252", "anchor": "fb-659309551252", "service": "fb", "text": "Also - typical USB flash drives have complex firmwares on them. A drive doesn't have to have been custom-made to pretend to be a printer and exploit a device driver, it could have just had the bad luck to be plugged into an infected computer.", "timestamp": "1399998115"}, {"author": "Eric", "source_link": "https://www.facebook.com/jefftk/posts/659297275852?comment_id=659323912472", "anchor": "fb-659323912472", "service": "fb", "text": "it can pretend to be smaller then it is and use the extra space to store all the files that get placed on it and are deleted.", "timestamp": "1400005656"}, {"author": "Dustin", "source_link": "https://www.facebook.com/jefftk/posts/659297275852?comment_id=659327625032", "anchor": "fb-659327625032", "service": "fb", "text": "We got a USB device on eBay a fee years ago that included an automated installer: it pretended to be a keyboard, and *typed* the binary driver for itself out at a command prompt, and installed that. Really fun to watch.", "timestamp": "1400007719"}, {"author": "Wayne", "source_link": "https://www.facebook.com/jefftk/posts/659297275852?comment_id=659333248762", "anchor": "fb-659333248762", "service": "fb", "text": "", "timestamp": "1400010839"}]}