This event has ended. View the official site or create your own event → Check it out
This event has ended. Create your own
View analytic
Friday, May 20 • 2:00pm - 3:00pm
Forensics Impossible: Self-Destructing Thumb Drives

Sign up or log in to save this to your schedule and see who's attending!

Many people do not understand that a USB thumb drive is a mini computer, capable of making decisions and reading and writing memory all on its own. Each drive has firmware responsible for implementing the responses to any read or write requests sent to it by a host computer. Forensic tools such as write blockers can prevent certain commands from being sent to the drive, but they have no impact at all on what the drive's firmware chooses to do. What if it chooses to erase everything if it isn't continuously sent a special sequence of commands that only the user knows?
In this talk, I will demonstrate (through code only, no hardware tinkering) how to modify the firmware on a standard USB thumb drive to erase everything (including itself) if custom software isn't running on the PC that the drive is plugged into.


Brandon Wilson

Brandon Wilson is an East Tennessee State University graduate, software developer and hacker of random things like game consoles and TI graphing calculators. An avid tinkerer of anything USB-related, he has spoken at DerbyCon about BadUSB and appeared in the Wall Street Journal and several other publications. He also collects DMCA takedown notices for fun.

Friday May 20, 2016 2:00pm - 3:00pm
Scruffy City Hall 32 Market Square, Knoxville, TN 37902

Attendees (29)