Security Basics mailing list archives

Re: USB sticks on pubic computers security


From: flur () d1f org
Date: 20 Oct 2006 07:07:14 -0000

Safe hex: Never insert your device into an untrusted host.

Consider booting the machine into a clean state by carrying around a livecd of some sort (knoppix/backtrack/etc). You 
should note that this technique doesnt mitigate against physical attacks (there may be a keylogger attached to or even 
embedded into your keyboard, there may be a hidden camera over your shoulder, etc etc). 

Also note that in many cases (such as enterprises/netcafe/etc) network policy will rarely allow a 'new system' access 
to its network, thus some configuration may be required.

If you want to be really clever, you can install a safe OS onto the USB alongside your data and boot off USB if the 
BIOS supports it (most modern machines do).

Good luck!
flurdoing

---------------------------------------------------------------------------
This list is sponsored by: Norwich University

EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The NSA has designated Norwich University a center of Academic Excellence 
in Information Security. Our program offers unparalleled Infosec management 
education and the case study affords you unmatched consulting experience. 
Using interactive e-Learning technology, you can earn this esteemed degree, 
without disrupting your career or home life.

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------


Current thread: