29C3: Travis Goodspeed – writing a thumbdrive from scratch


In this presentation from the recent 29C3 conference, Travis Goodspeed provides an interesting explanation of his from scratch implementation of a USB Mass Storage disk in user-land Python for the Facedancer board. . He also covers aspects of antiforensics are they relate to thumbdrives. His demo show how a thumbdrive’s own firmware can recognize and defend itself against disk imaging and other forensic tools, wiping itself to an innocent state whenever it detects disk imaging, undeletes, access by the wrong operating system, or the presence a write blocker.

Interesting stuff!

Join the Conversation

2 Comments

Leave a comment

Leave a Reply to the machinegeek Cancel reply

Your email address will not be published. Required fields are marked *

Notify me of followup comments via e-mail. You can also subscribe without commenting.