sam1967 Posted February 13, 2007 Share Posted February 13, 2007 a while back someone asked me to charge his usb mp3 player on my pc by sticking it in the usb port, is it possible that the usb drive could slurp information automatically from my pc withoit any intervention ? or would i have to run a program such as a batch file from the deivce before it could slurp data from my computer. Quote Link to comment Share on other sites More sharing options...
psydT0ne Posted February 13, 2007 Share Posted February 13, 2007 imho software would be needed...just like hacksaw or switchblade. Quote Link to comment Share on other sites More sharing options...
UnknownPrivelage Posted February 13, 2007 Share Posted February 13, 2007 I did not know you could charge an mp3 USB player like that o_O Yes it is definetely possible to have been slurped. He doesnt even have to have a U3 for you to get slurped...for example Silverions switchblade.. Quote Link to comment Share on other sites More sharing options...
moonlit Posted February 13, 2007 Share Posted February 13, 2007 You'd need software (or a simple script) on your machine, the MP3 player wouldn't need software on it or anything. The script you'd need would poll for new drives, when a USB drive (or a drive with a drive letter usually used for USB devices) is inserted, it would just copy everything off of the drive. Quote Link to comment Share on other sites More sharing options...
sam1967 Posted February 13, 2007 Author Share Posted February 13, 2007 hi im still confused there was no sw on my computer i just plugged his usb mp3 player into my usb port so the question is: could a program be run automatically in the mp3/usb player to copy data from my hard drive without any intervention on my behalf (such as installing sw etc ) ? Quote Link to comment Share on other sites More sharing options...
majk Posted February 13, 2007 Share Posted February 13, 2007 hi im still confusedthere was no sw on my computer i just plugged his usb mp3 player into my usb port so the question is: could a program be run automatically in the mp3/usb player to copy data from my hard drive without any intervention on my behalf (such as installing sw etc ) ? Maybe, if the MP3 player has some kind of U3 capability. Quote Link to comment Share on other sites More sharing options...
sam1967 Posted February 13, 2007 Author Share Posted February 13, 2007 so the answer is basically yes, i thought it was a bit odd that he asked me to charge his mp3 player using my pc, but i thought there was no way he could hack me . lol.. this was a few years ago and ive thought about it since and realised he was up to no good, now i know what he was up to. ah well fool me once Quote Link to comment Share on other sites More sharing options...
Jester Posted February 13, 2007 Share Posted February 13, 2007 I think the answer is no he couldn't have hacked you unless he had an autorun on his mp3 player and you actually clicked on the drive to like view the contents. But just plugging it in would not run any kind of scripts unless as majk said it had some kind of U3 capability which I don't know of any as of yet. 8) Quote Link to comment Share on other sites More sharing options...
sam1967 Posted February 13, 2007 Author Share Posted February 13, 2007 spare me the bull.shit jester i just read several article by maxdamage et al explaining exactly how this could be done without any user intervention, im buying my self a u3 cruzer right now on ebay and wil try it out myself, i now know how easy it is to do this attack, i Quote Link to comment Share on other sites More sharing options...
Jester Posted February 13, 2007 Share Posted February 13, 2007 Wow not sure where that one came from just trying to help out. Damn as far I knew there had to be some sort of intervention I have not seen a way yet work without user intervention on a non U3 device. So point me to these workin examples so I learn from them. Quote Link to comment Share on other sites More sharing options...
sam1967 Posted February 13, 2007 Author Share Posted February 13, 2007 I have not seen a way yet work without user intervention on a non U3 device where did i state the device was non U3 ? are you imagining things ? it probably was U3 in which case it would run without user intervention, Quote Link to comment Share on other sites More sharing options...
majk Posted February 13, 2007 Share Posted February 13, 2007 Because this was years ago and with an actual MP3 player (I don't know of any MP3 players now that have U3 capability, much less years ago) I think it's unlikely that you got hacked. Quote Link to comment Share on other sites More sharing options...
sam1967 Posted February 13, 2007 Author Share Posted February 13, 2007 it was 18 - 24 months ago. cant remember exactly. he TOLD me it was an MP3 player but it just looked like a USB stick to me . but many MP3 players do, it might well have been a U3 stick, i wasnt paying any attention you see, it was only afterwards i had the suspicion he hacked me, so would it have been TECHNICALLY possible to perform this switchblade hack 18 - 24 months ago ? i dont even see this guy hanging around anymore, im just curious, Quote Link to comment Share on other sites More sharing options...
moonlit Posted February 13, 2007 Share Posted February 13, 2007 Yes, he hacked you. He hacked you bad. Every computer you've used since has been infected to the bollocks and the feds are about to come and find you. Oh, and spare me the BS sam1967. Quote Link to comment Share on other sites More sharing options...
sam1967 Posted February 13, 2007 Author Share Posted February 13, 2007 i dont think he virused me i think he wanted to spy on me which i find loathesome. but everyone is doing it, everyone wants to spy on their neighbour. you never know they might be terrorists, Quote Link to comment Share on other sites More sharing options...
majk Posted February 13, 2007 Share Posted February 13, 2007 it was 18 - 24 months ago.cant remember exactly. he TOLD me it was an MP3 player but it just looked like a USB stick to me . but many MP3 players do, it might well have been a U3 stick, i wasnt paying any attention you see, it was only afterwards i had the suspicion he hacked me, so would it have been TECHNICALLY possible to perform this switchblade hack 18 - 24 months ago ? i dont even see this guy hanging around anymore, im just curious, Well from your description it certainly is a possibilty. Quote Link to comment Share on other sites More sharing options...
Paralys Posted February 14, 2007 Share Posted February 14, 2007 A.) To my knowledge, holding down shift disables autorun when you insert things (correct me if I'm wrong) so there's some future reference for you. B.) More reference for the future, don't be an ass to ppl on the forums like you were being to Jester a few minutes ago, flaming people for trying to help you makes you an official n00b. Quote Link to comment Share on other sites More sharing options...
Zaza Posted February 14, 2007 Share Posted February 14, 2007 To my knowledge, holding down shift disables autorun when you insert things (correct me if I'm wrong) so there's some future reference for you. You're correct, holding shift disables autorun on Windows temporarily. Quote Link to comment Share on other sites More sharing options...
silivrenion Posted February 15, 2007 Share Posted February 15, 2007 USB MP3 players aren't U3 devices usually, but that doesn't mean there isn't a danger of it. Its very possible that an MP3 player can be hacked to function like U3 when plugged in to a USB port. There are hacks out there that allow any removable media device to function as a CD-Drive, thereby having an automatic autorun and running any payloads. In addition, MP3 players that serve as disk drives will have autorun capabilities on Windows XP Sp2 and greater. So the possibility is there for the MP3 player to be malicious, but the probability of it is quite low. Quote Link to comment Share on other sites More sharing options...
m0u53 Posted March 12, 2007 Share Posted March 12, 2007 why do you care do you have passes to porn sites or something unless you let him on your pc or if you dont have any protection like me then nothing bad is going to happen and this whole delima on the hacksaw i know its badass and stuff but you act like he is still trying to fuck you over(exscuse my french) but i dont see why you would worry really i mean if you change your passwords atleast once a month then your good to go take note:i never change my passes and i have no protection AT ALL Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.