[unisog] Pen testers after my own heart...

Chris Edwards chris at eng.gla.ac.uk
Tue Jun 13 11:19:03 GMT 2006


On Mon, 12 Jun 2006, Jordan Wiens wrote:

| http://www.microsoft.com/whdc/device/storage/usbfaq.mspx
| -----
| Q: What must I do to trigger Autorun on my USB storage device?
| The Autorun capabilities are restricted to CD-ROM drives and fixed disk 

...which suggests a variation on the attack - simply burn a load of 
autorun CDs and leave them around!  

(cheaper than memory sticks too)

As for globally disabling USB, I think we'd have a riot on our hands.  
In our University environment, education is the way to go.


More information about the unisog mailing list