2
hitko
2y

I recently came across this article with some basic security advices, like use 2fa security key, encrypt your USB keys, don't use untrusted USB chargers / cables / ports (or use a data blocker cable if you need to charge your device). It made me think, how relevant are the USB-related threats and risks today? Do people really still use and carry so many wired USB devices, and just drop or plug them wherever?

The last time I used an USB device to transfer some important data was probably over 10 years ago, and for the love of god I don't know anyone who still carries an USB key with sensitive data with them on a daily basis, much less actively uses it. Besides, whoever still does that probably puts their USB key on the same keychain as their ID / access tag and a bunch of other keys (including a 2fa device if they use one) - they're not going to lose just some sensitive data, they're going to lose authentication and physical access devices as well, and that could turn a small data leak into a full-scale incident, with or without an encrypted USB device.

I'm also not sure about untrusted USB cables and ports, from what I've seen the USB outlets and cables are pretty much non-existent in public places, most places offer wireless charging pads instead (usually built into a hand rest or table surface).

Comments
  • 3
    Well, dunno where you live, but here, not only are USB outlets a common sight in big city metro stations, libraries, etc, but places like universities take printing orders from USBs (though admittedly they are moving towards e-mail).

    Sticking a USB in such machines is akin to go to a swingers party without condoms...
  • 1
    @CoreFusionX Mostly Central Europe, but also almost every other place I've travelled to lately. Airports had wireless charging pads built into arm rest, cafés have them built into tables, shopping malls have them at the food court areas. If you see an USB outlet around here, it was probably installed good 5 or 10 years ago and is usually broken anyway.
  • 0
    I have a phone case that is a battery pack as well and it doesn't have a data line. It would never be a problem for me.
Add Comment