Go Back   Horizons Unlimited - The HUBB > Equipment, Travel > Communications

Communications Connecting - internet cafes, laptops, Palm devices, cell phones - how to connect, use, which one, and Bike to Bike and passenger intercoms.
Contact Overland Solutions for all your custom modifications and setup for overland travel.

Reply
 
LinkBack Thread Tools Display Modes
  #1  
Old 16 May 2007
Contributing Member
HUBB regular
 
Join Date: Jun 2002
Location: Derbyshire, Britain; ± N52°58', W1°30'
Posts: 94
Exclamation WARNING: USB Flash Drive users beware

If you routinely plug a USB flash drive into PCs in internet cafes, or even PCs where at some time untrusted people may have temporarily had access (even possibly your friend's or your own home PC), then at some point it is likely that a copy of your files will be covertly taken without your permission.

USB Hacksaw is one example of freely available software that makes this very easy to do:

http://wiki.hak5.org/wiki//USB_Hacksaw:

This web page gives a free download of the USB Hacksaw software. It takes a few minutes to download and install this to a USB flash drive. The rogue flash drive is then plugged into the USB port of a PC and automatically installs the USB Hacksaw software within seconds, with no need for user input. Here is a description of what happens next:

"This hack is based on a modified version of USBDumper. Once installed on a targert machine it will stay resident and wait for a USB flash drive to be inserted. Once a USB flash drive is inserted the hacksaw will download the contents of the drive to a temporary location using the modified USBDumper, then silently run the send.bat file located in the same directory, which will then archive the contents using RAR, eastablish an SSL SMTP connection to smtp.gmail.com using Stunnel and Blat, email the downloaded data to an email address, and remove the documents and archives."
Reply With Quote
  #2  
Old 16 May 2007
Registered Users
Veteran HUBBer
 
Join Date: Sep 2004
Location: Paide, Estonia
Posts: 349
Things like that were discussed a few days ago:

http://www.horizonsunlimited.com/hub...s-device-27022

While in Africa I now and then got some new .exe files (viruses) on my USB stick after visiting Internet cafes.
Reply With Quote
  #3  
Old 23 May 2007
Registered Users
HUBB regular
 
Join Date: Aug 2006
Location: Louisiana
Posts: 23
OMGoodness, I am so glad you posted this, I keep all my bike payment info on my thumb drive, so I can prove when payments have been made, of course it links to my bank account too.

AHHhhh, I scared myself !

Gotta fix this, before I go on the road again.

I already knew about the key logger, so thanks too Ian Bradshaw..

__________________
SwampFox

Tim 5:1-2
Treat younger men as brothers, older women as mothers, and younger women as sisters, with absolute purity.

http://www.xanga.com/christianrider
Reply With Quote
  #4  
Old 23 May 2007
beddhist's Avatar
Contributing Member
Veteran HUBBer
 
Join Date: Sep 2003
Location: Whangarei, NZ
Posts: 2,225
Arrow

Keep sensitive info on your USB stick and your laptop encrypted, using something like PGP. If you use a good passphrase the encryption is uncrackable and a data thief is left with useless files.
__________________
Cheers,
Peter.

Europe to NZ 2006-10
Reply With Quote
  #5  
Old 23 May 2007
BruceP's Avatar
Contributing Member
Veteran HUBBer
 
Join Date: Jun 2006
Location: St Helens
Posts: 601
Quote:
Originally Posted by beddhist View Post
Keep sensitive info on your USB stick and your laptop encrypted, using something like PGP. If you use a good passphrase the encryption is uncrackable and a data thief is left with useless files.
No encryption is uncrackable.

Best to keep the data away from computers IMO, and I work with the things !

Now, if only internet cafes dropped MS and realised Solaris was a better solution :-)
__________________
--

http://www.ytc1.co.uk
Reply With Quote
  #6  
Old 24 May 2007
beddhist's Avatar
Contributing Member
Veteran HUBBer
 
Join Date: Sep 2003
Location: Whangarei, NZ
Posts: 2,225
Quote:
Originally Posted by BruceP View Post
No encryption is uncrackable.
Reading a bit about it it is my understanding that with a secure passphrase all available computing power on the planet would take more than a lifetime to crack the algorithm. I don't care what happens to my data after I'm dead.

Quote:
Originally Posted by BruceP View Post
Best to keep the data away from computers IMO, and I work with the things !
Don't use computers, then? You will need to write it down in clear text on paper then...

All safety and security is relative.
__________________
Cheers,
Peter.

Europe to NZ 2006-10
Reply With Quote
  #7  
Old 24 May 2007
Gold Member
Veteran HUBBer
 
Join Date: Apr 2006
Location: Philadelphia, US
Posts: 648
Yo have two concerns with the USB stick...Upstream and Downstream.
Upstream deals with infecting other computers with your USB stick and that will compromise more information than exists on your stick.
Downstream deals with the information on your stick being emailed to a culprit.
To mitigate the Upstream risk, online solutions are available but aren't 100%. I won't recommend any specifically as I don't want my PM box filled with IT specific questions. But do your 5minutes of research now and develop a plan before you run into a problem, and at a time convenient to you.

Downstream, same advice as upstream. These cafes, and other public places are vectors for such hacks/viruses/etc.
__________________
edde
93 BMW K75s
www.motoedde.com
Reply With Quote
  #8  
Old 6 Jun 2007
Registered Users
New on the HUBB
 
Join Date: Jun 2007
Posts: 2
Hey this is Darren from Hak5. I'm the author of the program in question. I found this site while checking our apache logs. Anyway as a fellow rider myself I figured I'd weigh in on this.

First off, the program was built as a proof of concept to show how vulnerable Windows computers are in their default configuration. We spent a great deal of time talking about how to protect yourself from such a hack in the episode that covered this program. Education is always the answer.

I highly recommend everyone with USB drives look into encryption. My personal favorite is a free and open source program called Truecrypt, from truecrypt.com. It's really easy to use and very secure. Google it and you'll find a ton of tutorials and testimonials.

Anyway I hope that clears things up.

Oh and for the record I ride a Honda Rebel, but will soon be moving up to the Shadow Spirit. 250cc just isn't enough, especially on those long hauls!
Reply With Quote
  #9  
Old 6 Jun 2007
Registered Users
Veteran HUBBer
 
Join Date: Sep 2004
Location: Paide, Estonia
Posts: 349
Quote:
Originally Posted by Hak5Darren View Post
I highly recommend everyone with USB drives look into encryption. My personal favorite is a free and open source program called Truecrypt, from truecrypt.com. It's really easy to use and very secure.
Drive decryption requires password entry and that password can be captured by key logger, unless it uses some kind of "password hardware" like physical ID card or something. There is no security in public computers if you need to enter password via keyboard.

Also, this Truecrypt software requires Windows 2000 or newer and *administrator privileges*, something that is not present in many public computers (internet cafes). Also I can't see how data from new decrypted virtual disk can't be copied by a bad program the same way as from ordinary volume if the decrypted volume appears in system as a logical disk the same way as any other disks.
Reply With Quote
  #10  
Old 27 Jul 2007
Contributing Member
Veteran HUBBer
 
Join Date: Jul 2002
Location: Sydney, NSW, Australia
Posts: 1,366
What they'll get off my flash drive is a few Gb of photos ..
__________________
---
Regards Frank Warner
motorcycles BMW R80 G/S 1981, BMW K11LT 1993, BMW K75 G/S
Reply With Quote
Reply


Currently Active Users Viewing This Thread: 1 (0 Registered Users and/or Members and 1 guests)
 
Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


Similar Threads
Thread Thread Starter Forum Replies Last Post
U3 Flash Drive? Ekke Communications 13 6 Jun 2007 19:21

 
 


HU DVD Summer Special!

Now that summer is here, get On the Road! Take 30% off the Achievable Dream - On the Road! 2-DVD set until August 31 only. Get On the Road! Learn the tips to staying healthy, happy and secure on your motorcycle adventure!

Our veteran travellers share their tips (and great stories) for staying healthy, happy and secure on your motorcycle adventure.

"A fantastic, informative and inspirational DVD."

"It's brilliant - thank you very much!"

Check it out at the HU Store! Remember to use Coupon Code 'ONTHEROAD' on your order when you checkout.


Renedian Adventures


Renedian Adventures

What others say about HU...

"I just wanted to say thanks for doing this and sharing so much with the rest of us." Dave, USA

"Your website is a mecca of valuable information and the DVD series is informative, entertaining, and inspiring! The new look of the website is very impressive, updated and catchy. Thank you so very much!" Jennifer, Canada

"...Great site. Keep up the good work." Murray and Carmen, Australia

"We just finished a 7 month 22,000+ mile scouting trip from Alaska to the bottom of Chile and I can't tell you how many times we referred to your site for help. From how to adjust your valves, to where to stay in the back country of Peru. Horizons Unlimited was a key player in our success. Motorcycle enthusiasts from around the world are in debt to your services." Alaska Riders

contest pic

10th Annual HU Travellers Photo Contest is on now! This is an opportunity for YOU to show us your best photos and win prizes!

NEW! HU 2014 Adventure Travel T-shirts! are now available in several colors! Be the first kid on your block to have them! New lower prices on synths!

HU 2014 T-shirts now in!

Check out the new Gildan Performance cotton-feel t-shirt - 100% poly, feels like soft cotton!


What turns you on to motorcycle travel?


Global Rescue, WORLDwide evacuation services for EVERYONE

Global Rescue is the premier provider of medical, security and evacuation services worldwide and is the only company that will come to you, wherever you are, and evacuate you to your home hospital of choice. Additionally, Global Rescue places no restrictions on country of citizenship - all nationalities are eligible to sign-up!


New to Horizons Unlimited?

New to motorcycle travelling? New to the HU site? Confused? Too many options? It's really very simple - just 4 easy steps!

Horizons Unlimited was founded in 1997 by Grant and Susan Johnson following their journey around the world on a BMW R80 G/S motorcycle.

Susan and Grant Johnson Read more about Grant & Susan's story

Membership - help keep us going!

Horizons Unlimited is not a big multi-national company, just two people who love motorcycle travel and have grown what started as a hobby in 1997 into a full time job (usually 8-10 hours per day and 7 days a week) and a labour of love. To keep it going and a roof over our heads, we run events (22 this year!); we sell inspirational and informative DVDs; we have a few selected advertisers; and we make a small amount from memberships.

You don't have to be a Member to come to an HU meeting, access the website, the HUBB or to receive the e-zine. What you get for your membership contribution is our sincere gratitude, good karma and knowing that you're helping to keep the motorcycle travel dream alive. Contributing Members and Gold Members do get additional features on the HUBB. Here's a list of all the Member benefits on the HUBB.


Books & DVDs

amazon

All the best travel books and videos listed and often reviewed on HU's famous Books page. Check it out and get great travel books from all over the world.


Motorcycle Express for shipping and insurance!

Motorcycle Express

MC Air Shipping, (uncrated) USA / Canada / Europe and other areas. Be sure to say "Horizons Unlimited" to get your $25 discount on Shipping!
Insurance - see: For foreigners traveling in US and Canada and for Americans and Canadians traveling in other countries, then mail it to MC Express and get your HU $15 discount!




All times are GMT +1. The time now is 13:12.