Post by @saltmyhash@infosec.exchange

Saltmyhash @saltmyhash@infosec.exchange

· 5mo ago

686

318

Conversation (19)

Showing 12 of 19 cached locally.

7 comments are reported by the remote server but not cached here yet

schratze

@schratze@todon.nl · May 21

@saltmyhash@infosec.exchange windows user has been here how can you tell? desktop.ini

Michaël Parienti

@mparienti@piaille.fr · May 22

Thread reply

@schratze@todon.nl @saltmyhash@infosec.exchange Nope, Windows users leave "\r\n" behind them in files in (wrongly configured) git repo 🤮

Cassandrich

@dalias@hachyderm.io · May 23

Thread reply

@mparienti@piaille.fr @schratze@todon.nl @saltmyhash@infosec.exchange That's only when the person actually intended to modify files on the medium though. Not just as a consequence of "read-only" access. 🤬

Cassandrich

@dalias@hachyderm.io · May 23

Thread reply

@mparienti@piaille.fr @schratze@todon.nl @saltmyhash@infosec.exchange Need a USB flash drive with active self-defense: When it detects a write of one of these turds, it brings up HID devices, takes over the host, pops it, patched the OS to remove the malicious code that drops these turds.