Plug the USG into your port before you plug in that new USB flash drive

By Mark Coppock Published March 6, 2017

A number of nasty methods exist to remotely exploit a device, for example, a router that is connected to the internet. There are even more ways to exploit a PC if the cybercriminal has physical access to it. But the most embarrassing, perhaps, is when you infect your own PC by plugging in a malware-infested USB flash drive.

That is probably not terribly fair — anyone can be tricked into plugging in such devices, given that they are designed to look just like any other flash drive. And there is little you can do to protect yourself against them, which is something a new hardware firewall called USG is intended to help prevent, Hackaday reports.

Recommended Videos

The reason malware-infected USB flash drives are so dangerous is that devices using attacks like BadUSB inject their malicious code directly into the USB driver software that enables a PC to connect to a USB device. The code is executed by the USB device’s own microprocessor, meaning there is no virus file being accessed on the PC that antivirus software can recognize and protect against.

The USG device created by engineer Robert Fisk sits in between the PC’s USB port and any device that is going to be plugged in, inserting an SPI hardware firewall to isolate any bad USB device. Because the firmware of the USG device is completely open, anyone with the technical know-how can dig into it and verify that it can be trusted — something that’s just not possible with the typical USB flash drive.

According to some sources, even factory-fresh USB flash drives can’t be assumed free of malware, backdoors, and other nefarious purposes, and so a device like the USG could one day be more than just a luxury of the paranoid. Fisk provides details on how to build your own USG device, along with information on how and why it works. He also sells a version that is more professional in appearance for $60, in case you don’t have the time or technical inclination to build your own.

Updated on 3-6-2017 by Mark Coppock: Clarified that the USG is an SPI hardware firewall and updated pricing information.

Former Computing Writer

Mark Coppock is a Freelance Writer at Digital Trends covering primarily laptop and other computing technologies. He has…

Topics

Computing

Ollama brings free, local text-to-speech to your Mac with natural-sounding AI voices

Ollama's new Phonon integration brings natural-sounding AI voices to your Mac, letting you generate speech locally without relying on cloud services or a subscription.

Speech-to-text apps have flooded the App Store, making it easier than ever to type on our Macs with just our voice. I have previously covered one such app called TypeWhisper. However, there has been a dearth of good text-to-speech models, and most of the good ones are locked behind a subscription.

Ollama, an open-source app that lets you run local AI models on your computer, wants to change that. It works on macOS, Windows, and Linux, and your prompts are never stored or used for training.

Computing

Researchers develop a new forensic tool that can recover deleted AI chats from your phone’s memory

Pressing delete on your AI chat doesn’t mean it’s actually gone. ORISA can recover deleted conversations from your local AI apps.

recovering-deleted-ai-chats

Did you think hitting delete on your AI chatbot conversation actually makes it disappear? Georgia Tech researchers just proved that's not entirely true. They have built a forensic tool called ORISA that can dig deleted conversations from your phone and even rebuild them into a working chatbot session you can keep talking to.

How can ORISA bring deleted AI conversations back?

Computing

Apple’s “Pro and Tell” October 28 event: Everything we expect from touchscreen MacBooks to a new iMac

Prepare for a touchscreen MacBook that costs around $3,000.

Computer, Electronics, Laptop

Touchscreen laptops have been around for years. You can get them in all sizes and shapes. Just not from Apple. For years, the Cupertino giant has treated the idea of a touchscreen MacBook the way I treat a meeting that could have been an email: with open contempt. However, Wednesday looks like the day the company could finally change its mind.

The latest Apple invite puts the “Pro and Tell” showcase in Los Angeles at 10 a.m. PT (1 p.m. ET) on October 28, 2026. Instead of a regular live-streamed keynote, it is an invitation-only, hands-on event for a handful of press and creators (similar to what the company did for the MacBook Neo earlier this year).