Categorized | Antivirus

The dead drop resurrected?

… a drop used for the clandestine exchange of intelligence information…
This is one definition of a ‘dead drop’, and one’s mind automatically switches to images of John le Carré’s George Smiley and other famous spy characters, fictional or real, who secretly exchange sensitive information.
The German artist Aram Bartholl however, has set up the project ‘Dead Drop’ in New York City with an alternative use in mind.

In a recent blog posting he describes his project thus:

‘Dead Drops’ is an anonymous, offline, peer to peer file-sharing network in public space. I am ‘injecting’ USB flash drives into walls, buildings and curbs accessable to anybody in public space. You are invited to go to these places (so far 5 in NYC) to drop or find files on a dead drop. Plug your laptop to a wall, house or pole to share your favorite files and data.

According to his blog, the feedback has been overwhelming, and he has created a separate web site, which even has instructions for those who want to set up the dead drop system in their own city/neighborhood.
But hang on a second…
What do we know about inserting USB devices into a computer? It is one of the most popular propagation vectors for malware, and USB devices were for example used for spreading the infamous Stuxnet worm, as well as lots of other worms, viruses, trojans and spyware.
The ‘Dead Drop project’ encourages connecting an USB device, which content is totally unknown (and changes all the time), to your computer.
My guess is that it is just a question of time (and not much) before these USB devices are infected with malware – by someone’s badwill or unknowingly. Secure computing behavior doesn’t comply with connecting your computer to any unsecure USB device.
I have no idea about Bartholl’s motivation for initiating this project – it may have been for fun only for all I know. Nevertheless, anyone using the devices put themselves at substantial risk.
Don’t use ‘Dead Drop’ USB devices or other unsecure USB devices! http://manage.norman.com/images/general_pictures/illustrations/dead_drop.jpg/en?size=preview – on Norman’s security blog

Related Posts
  • Osama bin Laden dead – so watch for the spams and scams
    Google's top-trending Anglophone search term right now is, understandably, "osama bin laden dead". Google officially describes its hotness (you couldn't make this stuff up) as volcanic.The short versi...
  • Crum is not (yet) dead, long live Morphex
    Have you ever heard about the Morphex PE32 Loader? You are certainly not alone. Even the mighty “Uncle Google” can’t find the proper results: all quiet on the Google front But … it definitely ...
  • IPv4 is Not Dead
    If you consult the Internet Assigned Numbers Authority (IANA) IPv4 assignment page you will notice that there are no remaining “UNALLOCATED” blocks in IPv4. This comes as part of the chain...
  • Adobe Reader X stops malicious PDF spam campaign dead in its tracks
    A new malicious spam campaign underlines the security benefits of upgrading to the latest version of Adobe Reader - Adobe Reader X. SophosLabs are currently seeing reports of a low-level attack, spamm...
  • Like Francisco Franco, Internet Kill Switch is Still Dead
    Sometimes a really bad idea can live on, no matter how thoroughly it's rejected. Such is the case with the "Internet kill switch" idea featured on and off in proposed homeland security legis...
  • @EvilFingers and @DaKahuna2007: Is the IDS Dead?
    We had presented a video at DojoCon 2010 and its video is out here. I thought of embedding it here for people who wish to view them. Shyaam Sundhar, @EvilFingers and John Fulmer, @DaKahuna2007 Is the...
  • Return from the Dead: Waledac/Storm Botnet Back on the Rise
    The e-mail spam panorama is definitely showing an interesting trend lately. If you follow the news you may have noticed that a drop in e-mail spam activity was reported in the last couple of months; ...
  • Spam Volume Drop on Christmas Day
    The monthly State of Spam & Phishing report has been tracking the decline of overall spam in recent months. The chart below shows the global spam volume dropping significantly since August. An e...
  • Sudden spam drop leaves experts baffled
    Spam volumes appear to have dropped to averages last seen in 2008 after an expected surge in bogus email over the Christmas period failed to materialise. Full story: Network World on Security...
  • Spam Volumes Drop After Spamit Shakeup
    The last few weeks has seen quite a shakeup in the spamming world.  Our Spam Volume Index, which records relative movements in spam volume sent to a bundle of domains we monitor, has recorded a subst...

Comments are closed.

Security Status

Beware Facebook "Timeline" scams http://t.co/W5EW0cVv
5 months ago
Nigerian government (unknowingly) hosts phishing website http://t.co/uQd42ENw
5 months ago
PCMag Awards McAfee All Access its Editors’ Choice: SANTA CLARA, Calif.--(BUSINESS WIRE)--McAfee today announced... http://t.co/FakV7Vd8
5 months ago
RT @mikko: I hadn't noticed Google Maps has added 3D models of buildings. Here's a (very accurate) view of F-Secure HQ in Helsinki http://t.co/IKfAZlak
5 months ago
North Koreans aren't known for their online presence. But others may be lured into clicking Kim Jong-Il 'videos' too http://t.co/yQOon6YT
5 months ago
How to Protect Your Professional Reputation on Facebook Timeline http://t.co/I4bcR2VN
5 months ago
This is pretty impressive from @Softpedia: Facebook scans 2 trillion link clicks and blocks 220 million posts each day http://t.co/vKsn9gNl
5 months ago
Need for integrated approach to security in industrial control systems - http://t.co/tPBCNOow with @PikeResearch
5 months ago
Some free-based music we play at work http://t.co/xu5agZfc
5 months ago
Japan’s cyber defense weapon: a virus. It includes quotes by @Luis_Corrons via @InfosecurityMag
5 months ago