[ Thanks to An Anonymous Reader for
this link. ]
“Many people think that Linux is immune to the type of
Autorun attacks that have plagued Windows systems with malware over
the years. However, there have been many advances in the usability
of Linux as a desktop OS – including the addition of features that
can allow Autorun attacks.“This Shmoocon presentation by Jon Larimer from IBM X-Force
starts off with a definition of autorun vulnerabilities and some
examples from Windows, then jumps straight into the Linux side of
things.“Larimer explains how attackers can abuse these features to gain
access to a live system by using a USB flash drive. He also shows
how USB as an exploitation platform can allow for easy bypass of
protection mechanisms like ASLR and how these attacks can provide a
level of access that other physical attack methods do not.”