usbkill

https://github.com/hephaest0s/usbkill This does the same thing, but you can use any USB hardware as the entry/remove trigger. And you can script it to whatever you want. But... that doesn't sell unneeded hardware.

It always surprises me how hard it seems for people to take OpSec seriously (whether for terrorist plots or darknet markets). There are really a few basic ground rules that always seem to be violated, even by those with seemingly sufficient experience, like Ross Ulbricht. On the note of OpSec, there's an awesome project called USBKill, which probably would've saved Ross Ulbricht from prison. > USBKill is anti-forensic software distributed via GitHub, written in Python for the BSD, Linux and OS X operating systems. It is designed to serve as a kill switch if the computer on which it is installed should fall under the control of individuals or entities the owner or operator does not wish it to. It is free software, available under the GNU General Public License. [1] [0]: https://github.com/hephaest0s/usbkill [1]: https://en.m.wikipedia.org/

It reminds me of USBkill https://github.com/hephaest0s/usbkill Its primary use is to thwart machine fuzzing and debugging using USB devices. The moment there's a change in USB state, down the machine goes.

USBKill (https://github.com/hephaest0s/usbkill) lists one approach to solving that problem in its README: - Set USBKill to watch the status of a particular USB port - Attach a lanyard to a USB key - Wear the lanyard on your wrist - Plug the USB key you're wearing into the port USBKill is watching Then anytime you step away from the machine, USBKill would notice the removal of the key and shut it down.

You guys all have kill cords attached to your wrist, right? https://github.com/hephaest0s/usbkill

https://github.com/hephaest0s/usbkill Checks for changes with USB drives and shuts down the computer and optionally deletes files and wipes ram. USB stick on a wristband > unplugs when they take the computer > shuts down

You have a few mitigations that aren't listed here, but it's really moot because physical access is still game over. First, the GRSecurity patchset contains a kernel-level USB whitelist, so you can whitelist only known USB devices. A targeted attacker could attempt to spoof an existing/whitelisted USB device, but it does significantly harden the USB attack surface: 1. https://wiki.gentoo.org/wiki/Allow_only_known_usb_devices Clearly this only helps Linux people. For those using Linux/BSD/macOS, There's also usbkill, a Python-based antiforensic tool that just kills the computer if a device is inserted/removed that isn't on its whitelist: https://github.com/hephaest0s/usbkill While this won't stop Samy's box from starting to do its thing, it will at least shut the computer off and mitigate some of the potential damage. usbkill is in the Hom

That's why USB Kill programs [1] important. [1] https://github.com/hephaest0s/usbkill