advertisement
Forums

The Forum is sponsored by 
 

AAPL stock: Click Here

You are currently viewing the Tips and Deals forum
Magical flash drive opens a web site??
Posted by: jonny
Date: July 05, 2022 07:19PM
So, a tripod I got came with a credit card flip-out flash drive.
I thought, Cool... I'll format it. When I plugged it in, it automatically opened a warranty website. Wow. Never seen that.
When I opened disk utility, nothing showed up! How does it work?
Options:  Reply • Quote
Re: Magical flash drive opens a web site??
Posted by: Tiangou
Date: July 05, 2022 08:16PM
Under OS 9 and earlier, you could configure a flash drive (or CD/DVD) to open and launch an app or open a URL.

There's no such feature on a modern Mac running OS X.

My suspicion is that you had some driver -- like a Paragon driver -- that mounts NTFS PC-formatted volumes, and this driver opened the support page on mount of the volume.

If a 3rd party driver was used to mount the vol, the DU might not be able to see it.



Options:  Reply • Quote
Re: Magical flash drive opens a web site??
Posted by: jonny
Date: July 05, 2022 08:39PM
It launced off of two unrelated M1 Macs. One with I've been updating for years, and one brand new.
Options:  Reply • Quote
Re: Magical flash drive opens a web site??
Posted by: Tiangou
Date: July 05, 2022 08:51PM
Has to be something 3rd party on your system.

Safe-boot or boot to Recovery and you should be able to erase the drive with the DU.

Note that the method for safe-booting is a little different than on an Intel-based Mac.

[osxdaily.com]



Options:  Reply • Quote
Re: Magical flash drive opens a web site??
Posted by: jonny
Date: July 05, 2022 11:19PM
Rebooted in safe mode. Still performs its magic.



Edited 1 time(s). Last edit at 07/05/2022 11:19PM by jonny.
Options:  Reply • Quote
Re: Magical flash drive opens a web site??
Posted by: Tiangou
Date: July 05, 2022 11:32PM
I think you have your browser set to re-open web pages from the last session.



Options:  Reply • Quote
Re: Magical flash drive opens a web site??
Posted by: jonny
Date: July 05, 2022 11:37PM
Nope. I closed previous windows. Plugged in the chip. Saw it fill in the URL and go to the site.

You want it? I'd be happy to send it to you.
Options:  Reply • Quote
Re: Magical flash drive opens a web site??
Posted by: Tiangou
Date: July 05, 2022 11:52PM
There's no mechanism for a flash drive to do something like that under macOS X.

Done a malware scan lately?



Options:  Reply • Quote
Re: Magical flash drive opens a web site??
Posted by: jonny
Date: July 05, 2022 11:55PM
Malware works in safe-boot?
Options:  Reply • Quote
Re: Magical flash drive opens a web site??
Posted by: Tiangou
Date: July 05, 2022 11:57PM
Quote
jonny
Malware works in safe-boot?

Not sure that you successfully safe-booted.

And yes, malware could hijack your browser session even while safe-booted.



Options:  Reply • Quote
Re: Magical flash drive opens a web site??
Posted by: TheTominator
Date: July 06, 2022 08:37AM
Perhaps it isn't a USB flash drive, but is a USB HID "keyboard" that sends keystrokes directly after being inserted.

Then there is only the question of what keystrokes would be needed to surf to open a URL on Mac OS X from any context.
Options:  Reply • Quote
Re: Magical flash drive opens a web site??
Posted by: TheTominator
Date: July 06, 2022 08:48AM
It looks like

Command-space
safari.app
enter
Command-L
the full URL text
enter

Quote
TheTominator
Perhaps it isn't a USB flash drive, but is a USB HID "keyboard" that sends keystrokes directly after being inserted.

Then there is only the question of what keystrokes would be needed to surf to open a URL on Mac OS X from any context.
Options:  Reply • Quote
Re: Magical flash drive opens a web site??
Posted by: mikebw
Date: July 06, 2022 08:49AM
I wonder if it is actually loading an external website or something off the local storage?
Options:  Reply • Quote
Re: Magical flash drive opens a web site??
Posted by: jonny
Date: July 06, 2022 08:58AM
Quote
TheTominator
Perhaps it isn't a USB flash drive, but is a USB HID "keyboard" that sends keystrokes directly after being inserted.

Then there is only the question of what keystrokes would be needed to surf to open a URL on Mac OS X from any context.

I think you’re on to something.
Options:  Reply • Quote
Re: Magical flash drive opens a web site??
Posted by: TheTominator
Date: July 06, 2022 09:36AM
This technique has been used for a while.
The only question is if you have something that works like this or something else.

StackOverflow question "USB autoruns on mac" found to be HID "keyboard" device

Quote
jonny
Quote
TheTominator
Perhaps it isn't a USB flash drive, but is a USB HID "keyboard" that sends keystrokes directly after being inserted.

Then there is only the question of what keystrokes would be needed to surf to open a URL on Mac OS X from any context.

I think you’re on to something.
Options:  Reply • Quote
Re: Magical flash drive opens a web site??
Posted by: jonny
Date: July 06, 2022 09:49AM
Quote
TheTominator
This technique has been used for a while.
The only question is if you have something that works like this or something else.

StackOverflow question "USB autoruns on mac" found to be HID "keyboard" device

Quote
jonny
Quote
TheTominator
Perhaps it isn't a USB flash drive, but is a USB HID "keyboard" that sends keystrokes directly after being inserted.

Then there is only the question of what keystrokes would be needed to surf to open a URL on Mac OS X from any context.

I think you’re on to something.

I think that's it. I can see it type the URL into safari. What a cool/potentially nefarious gimmick!



Edited 1 time(s). Last edit at 07/06/2022 09:51AM by jonny.
Options:  Reply • Quote
Re: Magical flash drive opens a web site??
Posted by: TheTominator
Date: July 06, 2022 10:05AM
Quote
jonny
What a cool/potentially nefarious gimmick!

Indeed.

Anything you can do by typing, it could accomplish for good or evil. Or chaotic neutral.
Options:  Reply • Quote
Re: Magical flash drive opens a web site??
Posted by: Tiangou
Date: July 06, 2022 10:44AM
If it was that sort of device, you should have received a prompt to identify the keyboard.



Options:  Reply • Quote
Re: Magical flash drive opens a web site??
Posted by: jonny
Date: July 06, 2022 10:48AM
Quote
Tiangou
If it was that sort of device, you should have received a prompt to identify the keyboard.

Did not.
Options:  Reply • Quote
Re: Magical flash drive opens a web site??
Posted by: Tiangou
Date: July 06, 2022 11:21AM
Interesting...

Windows is very VERY vulnerable to those types of attacks, but there are protections built into the macOS against them. (Note the date in the StackOverflow post.)

If they've bypassed security-checks on the Mac, that's pretty scary. Those keyboard spoofers are commonly used to install ransomware and spyware.

If the makers are that sophisticated, you probably couldn't easily find out whether you've been hacked, but you should run a Malwarebytes scan just in case.



Options:  Reply • Quote
Re: Magical flash drive opens a web site??
Posted by: jonny
Date: July 06, 2022 11:30AM
Malwarebytes - zero threats
Options:  Reply • Quote
Re: Magical flash drive opens a web site??
Posted by: Speedy
Date: July 07, 2022 06:10PM
Offer to sell the drive to Apple.



Saint Cloud, Minnesota, where the weather is wonderful even when it isn't.
Options:  Reply • Quote
Re: Magical flash drive opens a web site??
Posted by: jonny
Date: July 07, 2022 07:04PM
Quote
Speedy
Offer to sell the drive to Apple.

I love it.
Options:  Reply • Quote
Re: Magical flash drive opens a web site??
Posted by: fauch
Date: July 07, 2022 08:11PM
Quote
TheTominator
This technique has been used for a while.
The only question is if you have something that works like this or something else.

StackOverflow question "USB autoruns on mac" found to be HID "keyboard" device

Quote
TheTominator
Perhaps it isn't a USB flash drive, but is a USB HID "keyboard" that sends keystrokes directly after being inserted.

Then there is only the question of what keystrokes would be needed to surf to open a URL on Mac OS X from any context.


This is very disturbing, but I'm trying to think of a method that could effectively avoid this type of "attack". Maybe requiring you to enter a password to activate any keyboard that is plugged in, but how would you program it so it activates the keyboard to enter the password but for nothing else? Maybe require a mouse click in a dialog box to activate the keyboard which most people would (hopefully) find suspicious when they plugged in a USB drive.
Options:  Reply • Quote
Re: Magical flash drive opens a web site??
Posted by: RAMd®d
Date: July 07, 2022 09:31PM
This is very disturbing...


Indeed.

The only thing worse would be reading:

I found this USB drive on the street, and when I plugged it in...






I am that Masked Man.

All you can do, is all you can do.

There’s trouble — it's time to play the sound of my people.

Your boos mean nothing to me, I've seen what you cheer for.

Insisting on your rights without acknowledging your responsibilities isn’t freedom, it’s adolescence.

I've been to the edge of the map, and there be monsters.

We are a government of laws, not men.

Everybody counts or nobody counts.

When a good man is hurt,
all who would be called good
must suffer with him.

You and I have memories longer than the road that stretches out ahead.

There is no safety for honest men except
by believing all possible evil of evil men.

We don’t do focus groups. They just ensure that you don’t offend anyone, and produce bland inoffensive products. —Sir Jonathan Ive

An armed society is a polite society.
And hope is a lousy defense.

You make me pull, I'll put you down.

I *love* SIGs. It's Glocks I hate.
Options:  Reply • Quote
Sorry, only registered users may post in this forum.

Click here to login

Online Users

Guests: 150
Record Number of Users: 186 on February 20, 2020
Record Number of Guests: 5122 on October 03, 2020