Specially Crafted Hardware

[wreuven]

Would this project stop a specially crafted USB device from bypassing the PyCIRCLean protection. How?

[Rafiot]

I guess it depends what you mean by specially crafted. Maybe?

[wreuven]

Simplest example is someone gives you a USB flash drive and when you plug it in, it acts as a keyboard and "types" in a series of commands to do various mischief which can include corrupting the target USB drive.

[Rafiot]

Oh, yeah, if the firmware of the key is trying to do nasty things, it should be covered, assuming you use the default CIRCLean firmware on a RaspberryPi:

• It is impossible to login on any user account so anything keyboard related will be stuck on the login screen
• This piece of code will also make it very difficult for a malicious firmware to give a safe file to the file checker and then give a malicious one when we copy the file over to the other key: https://github.com/CIRCL/PyCIRCLean/blob/master/filecheck/filecheck.py#L242