full-disclosure - USB Auto run function

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <001c01c45511$78341260$5d7f013d@c5>
From: aditya.deshmukh at online.gateway.technolabs.net (Aditya, ALD [ Aditya Lalit Deshmukh ])
Subject: USB Auto run function

> I have been interested in a potential exploit that may or may not be an 
> issue, I read lately that a potential malicious file could enter a system 
> via a USB Memory stick with a structured autorun.pif , and this file would 
> operate even if the screen lock is activated .

this is true only for cdroms where the autorun has been enabled, winxp does scan for the removable drives but does not run the program based on the autorun but the type of files on the reemovable drive

-aditya
??????????????????????????????????????????????????????
?b???v?"?.axZ?x??????Gb?*'??.?[kj???.?j)m???r??