KVM is so performant, if you stick a USB killer, it kills the VM.
I think every time I've tried to develop USB class compliant devices I've managed to crash OSes due to bugs in my device code... All of the OSes... Heck, some shipping devices will crash some OSes too. No surprises here. About time someone did it.https://twitter.com/gannimo/status/1265397262055813127 …
-
-
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
Happens to me alot while i'm developing my USB assessment framework and testing it. I've enjoyed reading their paper.
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
Based on how badly USB works outside perfect happy cases it seems we need to burn down everything related to USB and figure out something minimal and easy. And perhaps not create 400 different physical connectors this time.
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
This is one of a long line of efforts that do this — see umap2, and f-secure’s 2011 effort on top of QEMU virtual USB. (I’m sure the quoted work is awesome / novel, too.) It’s kind of telling that a decade of work exists in this area, and things haven’t improved on the OS side.
-
Compared to network-based attacks, USB attacks are somewhat weaker, putting less pressure on OS devs to fix / harden their stacks: A) USB is on-side (or requires hijacking a connected device / bridge) B) it seems more complicated, esp considering how simple Metasploit & Co are
End of conversation
New conversation -
-
-
You mean like the glucometer that keeps resetting and causes a DoS on the udev event handler?https://flameeyes.blog/2019/08/26/beurer-gl50-linux-and-debug-interfaces/ …
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
Contrary to the researchers, I find bugs in USB drivers casually, just using the PC daily. Like this one, this is the latest I found. Inserting Huawei USB LTE modem deadlocks CDROM driver and what it seems tries to execute zero-ed or free-ed memory. https://bugzilla.kernel.org/show_bug.cgi?id=207317 …
- Show replies
New conversation -
-
-
I know at least one OS that craps out despite not even supporting USB.
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
Oh yea, been there as well. Most "fun" was, when you accidentally trigger some workaround for quirky devices in the host stack and behaviour changes completely.
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.