Re: USB risks (continued)

["Kevin Davis" <computerguy () cfl rr com>]

Many USB keys have hardware switches to make them read only.  With Windows
2000 or Windows XP, no special drivers are required to read USB keys.

Autorun works on removable USB CD drives.

----- Original Message ----- 
From: "RSnake" <rsnake () shocking com>
To: "Gadi Evron" <ge () egotistical reprehensible net>
Cc: "Harlan Carvey" <keydet89 () yahoo com>;
<full-disclosure () lists netsys com>; <bugtraq () securityfocus com>
Sent: Friday, June 18, 2004 7:54 PM
Subject: Re: USB risks (continued)


> Autorun doesn't work with USB keyfobs.  Actually, it is my
> understanding that it doesn't work on any media that is deemed writable
and
> removable.  The distinction between USB devices and CDs is that the media
is
> writeable, but the drives aren't removeable on CDs.  That of course isn't
true
> if you have a USB drive, but I think part of the deal there is that you
need to
> install special drivers to even read USB CD drives.  That's kinda a weird
> distinction, but I researched it quite a bit earlier this year and that's
just
> how they define it.  With the advent of bootable USB devices, and more USB
> support, you can pretty much bet things will change, but for right now,
autorun
> isn't an issue.

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html