I'd feel pretty comfortable plugging it into a Macintosh
running
NAV-- making certain that Norton's setting's are set to
scan all
volumes.
Kin
On Sep 6, 2006, at 11:41 AM, Jason Mickela wrote:
> There is no auto-run for USB devices in windows. The
social
> engineering aspect of USB drives comes in the form of
cleverly
> named executables found on the devices.
>
> The old trick of
> "filename.doc
> .exe" is given new life because of
this. If you want to
> plug it in and check it out go ahead. Just make sure
that you don't
> open any programs and make sure to disable macros in
office if you
> open any documents.
>
> Jason.
>
>
> David Rieger wrote:
>> Good day Everyone,
>>
>> Here at my location someone turned in a thumb-nail
drive. Social
>> engineering is such that one could
"seed" an attack vector so that
>> an unwary person would activate the found drive (by
inserting it
>> into a machine) and become a victim.
>>
>> That said, what if the drive is innocuous?
>>
>> May I ask your collective opinion of the best way
to safely
>> explore the drive to get it back to its rightful
owner (if it's
>> innocuous - which is probably the case)?
>>
>> Thank you,
>>
>> David
>>
>>
>>
>>
------------------------------------------------------------
---------
>> ---
>> The following was automatically added to this
message by the list
>> server:
>>
>> For information about Micronet, including
subscribing to
>> or unsubscribing from its mailing list and finding
out
>> about upcoming meetings, please visit the Micronet
Web site:
>> <http://micronet.be
rkeley.edu/>.
>
>
------------------------------------------------------------
----------
> --
> The following was automatically added to this message
by the list
> server:
>
> For information about Micronet, including subscribing
to
> or unsubscribing from its mailing list and finding out
> about upcoming meetings, please visit the Micronet Web
site:
> <http://micronet.be
rkeley.edu/>.
------------------------------------------------------------
------------
The following was automatically added to this message by the
list server:
For information about Micronet, including subscribing to
or unsubscribing from its mailing list and finding out
about upcoming meetings, please visit the Micronet Web site:
<http://micronet.be
rkeley.edu/>.
|