USB Security Vulnerabilities

The cluster discusses security risks of USB devices, focusing on BadUSB attacks where malicious USBs impersonate keyboards or HID devices to inject malware and keystrokes. Commenters warn against plugging in untrusted USBs and highlight firmware exploits and attack vectors.

📉 Falling 0.3x Security
3,130
Comments
19
Years Active
5
Top Authors
#5983
Topic ID

Activity Over Time

2008
2
2009
18
2010
49
2011
103
2012
45
2013
148
2014
262
2015
221
2016
288
2017
164
2018
241
2019
267
2020
222
2021
217
2022
193
2023
309
2024
220
2025
159
2026
2

Keywords

inversepath.com USB arstechnica.com HN online.wsj A5 TCP ANY B5 PC usb device devices cable attack keyboard firmware computer attack vector pins

Sample Comments

fhars • Mar 14, 2025 • View on HN

No, USB is vulnerable to malicious devices.

craftyguy • Sep 5, 2018 • View on HN

It's a USB device, it already has the ability to do terrible things[0] when you plug it in.0. https://www.wired.com/2014/07/usb-security/

oblio • Mar 2, 2023 • View on HN

You mean you're worried about USB attacks?

Buge • Sep 15, 2018 • View on HN

You're not safe plugging a random USB into your computer. It can pretend to be a keyboard and install malware.

jokoon • Aug 6, 2020 • View on HN

I dont understand. Is USB just always insecure because of hardware?

Tepix • Aug 20, 2022 • View on HN

You haven't heard of BadUSB?Don't plug in untrusted USB devices.

kurtisc • Nov 7, 2017 • View on HN

Are there any situations where this would be a vulnerability but using a USB device as a HID would not?

yjftsjthsd-h • Nov 9, 2023 • View on HN

USB is an attack vector; if it's not exploiting your USB driver it's connecting your data pins to mains power. Keyboards are an air gap.

Devilboy • Feb 13, 2011 • View on HN

It has multiple attack vectors, not just USB.

tokenizerrr • Oct 1, 2015 • View on HN

How do you know your mouse or keyboard isn't going to attack your machine through the USB port?