Re: USB Auto run function

[Harlan Carvey <keydet89 () yahoo com>]

Oscar,
 
>   This issue has been discused in pentest list. Take
> a look at: 

I don't think the issue is that it's been discussed,
more that it hasn't been really resolved/addressed. 
Take a look at the post you linked to, specifically:

"I think turning off auto-run is a REALLY good idea."

According to MS documentation, autorun functionality
for USB-connected devices *is* off by default. 
However, the poster states pretty clearly that this
wasn't the case in his experience.  Also, the poster
(as well as others, such as the author of the 2600
article) aren't providing information such as the
value of the Registry key in question on systems
they've encountered...

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html