user942937 – WindowsTechs.com

Are there ways to mitigate the risks of using a Bluetooth/wireless keyboard when the device connected is next to it?

Posted on April 8, 2022 by user942937

Normally, I avoid using any Bluetooth or wireless devices, especially HIDs, but for a project I am working on the only keyboards that will fit the size are Bluetooth and wireless keyboards, so I am stuck having to use one.
To that end, I a… Continue reading Are there ways to mitigate the risks of using a Bluetooth/wireless keyboard when the device connected is next to it?→

Will setting up an installation on an SD card in this way prevent changes to the operating system?

Posted on January 14, 2022 by user942937

I want to set up an SBC, e.g. Raspberry Pi, Banana Pi, to work as close as possible to a computer running a Live Distro. I’m intending to use this to inspect suspicious or infected storage drives and view their contents. I’m not necessaril… Continue reading Will setting up an installation on an SD card in this way prevent changes to the operating system?→

Securely installing software in a hostile environment

Posted on December 5, 2020 by user942937

Consider the case where a user with a freshly installed Linux box is operating in a hostile environment controlled by an attacker with access to the internet gateway.
How can such a user update the system and install software securely usin… Continue reading Securely installing software in a hostile environment→

Can attackers send commands to/control infected air-gapped computers?

Posted on October 30, 2020 by user942937

I’ve been reading up on malware that can bridge air gaps between computers, like GSMem, Funtenna, etc. In the papers and articles I’ve been reading, the researchers mostly talking about getting files and data out of air-gapped computers us… Continue reading Can attackers send commands to/control infected air-gapped computers?→

Questions about A Monitor Darkly

Posted on September 23, 2020 by user942937

In his presentation, A Monitor Darkly, Ang Cui demonstrates how to manipulate images on the monitor by getting the firmware to execute commands embedded in a pixel contained in an image being displayed.
At first, he mentions that this is b… Continue reading Questions about A Monitor Darkly→

Would a public DNS help secure downloads over an unsecure connection?

Posted on July 27, 2020 by user942937

I am downloading large files with their checksums/hashes on a Linux machine with the DNS manually setup to use a publicly available trusted DNS, e.g., Google’s 8.8.8.8 since I am aware that DNS can be spoofed to possibly host a compromised… Continue reading Would a public DNS help secure downloads over an unsecure connection?→

Is it possible for IMSI-Catchers to block emergency calls?

Posted on March 11, 2020 by user942937

The Wikipedia article about emergency numbers mentions that Most GSM mobile phones can dial emergency numbers even when the phone keyboard is locked, the phone is without a SIM card, emergency number is entered instead of the PIN or there … Continue reading Is it possible for IMSI-Catchers to block emergency calls?→

Are all USB-based attacks dependent on being able to inject keystrokes?

Posted on January 23, 2020 by user942937

From what I’ve seen, USB-based attacks such as RubberDucky need to be able to open a terminal and then execute commands from there, usually to download and then install malware or to open a reverse shell.

Is this how most, if not all USB-… Continue reading Are all USB-based attacks dependent on being able to inject keystrokes?→

Can I use a text editor to detect keystroke injection?

Posted on September 24, 2019 by user942937

Let’s say for instance I have some USB devices I suspect of being programmed for to execute keystroke injection.
If I were to load a live OS and switch it to runlevel 1, then logged into an unpriviledged user and ran a text e… Continue reading Can I use a text editor to detect keystroke injection?→

Dealing with USB Arduinos

Posted on September 23, 2019 by user942937

It is probably common enough knowledge now that you should not plug into your computer any device that an attacker has had physical access to. Especially USB devices.

Thanks to the many tutorials on how to make your own RubberDucky/BadUSB… Continue reading Dealing with USB Arduinos→