Is puppy vulnerable to usb rubber ducky?
I have recently seen many videos in which an attacker connects a usb rubber ducky to windows, macOS, iPhone and even android and hacks it. But there is no video demonstrating it with linux. Are we safe?
Discussion, talk and tips
https://forum.puppylinux.com/
I have recently seen many videos in which an attacker connects a usb rubber ducky to windows, macOS, iPhone and even android and hacks it. But there is no video demonstrating it with linux. Are we safe?
If an "attacker" has actual physical possession of ANY device, consider it compromised, whether by USB device or other methods.
There is NO 100 PERCENT INVULNERABLE COMPUTING DEVICE! Furthermore, since Android is based on Linux...there's your answer.
Wiz
As I understand it, a rubber ducky can do anything a keyboard or mouse can do, it's just being done by a microcontroller, so if someone unfriendly turns on your computer (which logs itself in automatically) they can do whatever they want.
The protection would be to disable the autologin, change the password to something unguessable, lock the bios, and don't let strangers have access to your computer.
dancytron wrote: Sun Dec 18, 2022 1:03 pmThe protection would be to disable the autologin, change the password to something unguessable
Is this option possible in Puppy then?
@Tahrbaby - to change password, open a terminal & type passwd
Then input & confirm new password. (default w---w--- (a puppy bark))
To stop autologin, edit /etc/inittab thus:
comment out 2nd line (with plogin in it), by adding # to start of line.
copy next line & insert before that, & change tty2 to tty1 at start & end, then save
will now need to login each time - inputs are:
root (press enter)
(your password) (press enter)
@ozsouth :-
Thanks for that info, Oz. I think that's the first time I've ever seen it clearly and simply stated.....ALL in one place.....AND in plain English!
Cheers, mate!
Mike.
That is why anything INTERNAL is obsolete and dangerous to me.
"VCR" is the new computer (USB -> RAM -> CLOUD).
That's our Puppy.
Like no other.
ozsouth wrote: Mon Dec 19, 2022 12:45 am@Tahrbaby - to change password, open a terminal & type passwd
Then input & confirm new password. (default w---w--- (a puppy bark))To stop autologin, edit /etc/inittab thus:
comment out 2nd line (with plogin in it), by adding # to start of line.
copy next line & insert before that, & change tty2 to tty1 at start & end, then savewill now need to login each time - inputs are:
root (press enter)
(your password) (press enter)
@ozsouth
Many thanks for this.