Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Could someone please explain the risks of plugging into a random USB device?

I see a handful of people alluding to risks (viz. "USB Condom") but I don't understand precisely what the issue is.

On Windows, presumably there's autorun.inf which can launch any executable on the USB drive. Is that correct? What about if you plug in from Unix or MacOS?

Bonus question: What are the risk factors, both for you and the host, if you charge your smart-phone in a stranger's laptop through USB?



There's always the risk that it is wired in such a way that it attempts to fry the port it connects to.

The risk of hostile software should be relatively easy to deal with (even on ancient versions of Windows).


Also there is the obvious risk of carrying around and taking out a relatively expensive device like a laptop or a tablet. A good location for a dead drop would probably be a good location for a mugger, since neither should be too public.




Consider applying for YC's Fall 2026 batch! Applications are open till July 27.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: