Re: removing autorun from a flash drive

2009-03-11 Thread Robin Laing

Bruno Wolff III wrote:

On Tue, Mar 10, 2009 at 22:55:05 -0500,
  Bruno Wolff III  wrote:

On Tue, Mar 10, 2009 at 17:47:04 -0400,
  Todd Denniston  wrote:

Bruno Wolff III wrote, On 03/10/2009 05:34 PM:

Repartitioning the raw device would probably work. You would then create
a filesystem on the partition.

No, if you repartition the device, you wipe out the ability for the U3 
removal tool to work, but the fake CD remains IIRC.

Maybe I am missing something. If you write over the blocks with the U3
tool, how does it not get erased?

Is this tool located somewhere of than the normal blocks on the device?


I found some info, though it doesn't look like the full details are
publicly known.

The device shows itself as two devices and indicates different types for
each so that one looks like mass storage and the other a cd drive.
It is suspected that nonstandard scsi commands are required to write
to the cd device. Some people have tricked one of the available tools into
loading custom isos into the cd portion of the device.
So it looks like you do need a special tool if you want to have the space
initially reserved for the cd image released for use in the normal part.
Probably theer is some secret scsi command to do this that wouldn't be
too hard to find if someone were serious about figuring it out.
Why anyone would want one of these devices is beyond me. It's a security
nightmare for both the computer being used (due to autorun being enabled)
and the usb device owner (due to not just running code from the device).
If you own both, there is no reason to have that feature.



I agree with this.

When I had the software removed from one device.  The person that was 
doing it for me had to disconnect most USB devices from his computer. 
It also wouldn't work with the USB port on his monitor.


I did some searching at the time and found that there are keylogger 
tools that will auto install like a trojan onto the U3 partition.  Big 
security risk.


Also, my daughter had her stick with U3 on it for school.  The Mac 
computers would constantly corrupt the data because the dual partitions 
when unmounting.


Before I asked someone with Windows to remove the U3 code, I tried 
everything I could find to test this.  Even after this, I still needed a 
Windows box to remove the code.


On the download page for the tool, there was a comment box that I voiced 
my opinion on.



--
Robin Laing

--
fedora-list mailing list
fedora-list@redhat.com
To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list
Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines


Re: removing autorun from a flash drive

2009-03-10 Thread Bruno Wolff III
On Tue, Mar 10, 2009 at 22:55:05 -0500,
  Bruno Wolff III  wrote:
> On Tue, Mar 10, 2009 at 17:47:04 -0400,
>   Todd Denniston  wrote:
> > Bruno Wolff III wrote, On 03/10/2009 05:34 PM:
> >>
> >> Repartitioning the raw device would probably work. You would then create
> >> a filesystem on the partition.
> >>
> >
> > No, if you repartition the device, you wipe out the ability for the U3 
> > removal tool to work, but the fake CD remains IIRC.
> 
> Maybe I am missing something. If you write over the blocks with the U3
> tool, how does it not get erased?
> 
> Is this tool located somewhere of than the normal blocks on the device?

I found some info, though it doesn't look like the full details are
publicly known.

The device shows itself as two devices and indicates different types for
each so that one looks like mass storage and the other a cd drive.
It is suspected that nonstandard scsi commands are required to write
to the cd device. Some people have tricked one of the available tools into
loading custom isos into the cd portion of the device.
So it looks like you do need a special tool if you want to have the space
initially reserved for the cd image released for use in the normal part.
Probably theer is some secret scsi command to do this that wouldn't be
too hard to find if someone were serious about figuring it out.
Why anyone would want one of these devices is beyond me. It's a security
nightmare for both the computer being used (due to autorun being enabled)
and the usb device owner (due to not just running code from the device).
If you own both, there is no reason to have that feature.

-- 
fedora-list mailing list
fedora-list@redhat.com
To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list
Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines


Re: removing autorun from a flash drive

2009-03-10 Thread Bruno Wolff III
On Tue, Mar 10, 2009 at 17:47:04 -0400,
  Todd Denniston  wrote:
> Bruno Wolff III wrote, On 03/10/2009 05:34 PM:
>>
>> Repartitioning the raw device would probably work. You would then create
>> a filesystem on the partition.
>>
>
> No, if you repartition the device, you wipe out the ability for the U3 
> removal tool to work, but the fake CD remains IIRC.

Maybe I am missing something. If you write over the blocks with the U3
tool, how does it not get erased?

Is this tool located somewhere of than the normal blocks on the device?

-- 
fedora-list mailing list
fedora-list@redhat.com
To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list
Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines


Re: removing autorun from a flash drive

2009-03-10 Thread Todd Denniston

Bruno Wolff III wrote, On 03/10/2009 05:34 PM:

On Tue, Mar 10, 2009 at 14:38:54 -0500,
  Aaron Konstam  wrote:

Well I may be misleading you. I had to do some removal of software when
I originally bought the device. It would not load on Fedora so I removed
some software under XP. Then it would appear in Fedora but still had
some U3 stiff remaining. That is what I removed on my Fedora machine.
Sorry I forgot what I had done originally.


Repartitioning the raw device would probably work. You would then create
a filesystem on the partition.



No, if you repartition the device, you wipe out the ability for the U3 removal 
tool to work, but the fake CD remains IIRC.



DON'T delete the partitions until after removing the tool!

"Can I remove U3 technology from my USB drive?"
http://www.sandisk.com/Retail/Default.aspx?CatID=1450#Q13
or "U3 Launchpad Removal Tool"
http://www.sandisk.com/Retail/Default.aspx?CatID=1415

--
Todd Denniston
Crane Division, Naval Surface Warfare Center (NSWC Crane)
Harnessing the Power of Technology for the Warfighter

--
fedora-list mailing list
fedora-list@redhat.com
To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list
Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines


Re: removing autorun from a flash drive

2009-03-10 Thread Bruno Wolff III
On Tue, Mar 10, 2009 at 14:38:54 -0500,
  Aaron Konstam  wrote:
> Well I may be misleading you. I had to do some removal of software when
> I originally bought the device. It would not load on Fedora so I removed
> some software under XP. Then it would appear in Fedora but still had
> some U3 stiff remaining. That is what I removed on my Fedora machine.
> Sorry I forgot what I had done originally.

Repartitioning the raw device would probably work. You would then create
a filesystem on the partition.

-- 
fedora-list mailing list
fedora-list@redhat.com
To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list
Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines


Re: removing autorun from a flash drive

2009-03-10 Thread Aaron Konstam
On Tue, 2009-03-10 at 10:34 -0500, Michael Hennebry wrote:
> On Tue, 10 Mar 2009, Aaron Konstam wrote:
> 
> > On Mon, 2009-03-09 at 14:15 -0600, Robin Laing wrote:
> >> I purchased a drive that had U3 and it was not marked on the packaging.
> >>   I wouldn't have purchased the drive if I knew about it.
> >>
> >> I had to find a Windows user so I could remove it.  One person was upset
> >> because he had to remove hardware devices to get the software to work on
> >> his computer
> 
> > I just deleted he U3 stuff using F9. Although I will admit I thought I
> > deleted it months ago.
> 
> How did you do that?
> On my F9, it seems to show up as a CD,
> but mount -l doesn't admit its existence.
> 
Well I may be misleading you. I had to do some removal of software when
I originally bought the device. It would not load on Fedora so I removed
some software under XP. Then it would appear in Fedora but still had
some U3 stiff remaining. That is what I removed on my Fedora machine.
Sorry I forgot what I had done originally.
--

 ===
New York now leads the world's great cities in the number of people
around whom you shouldn't make a sudden move. -- David Letterman
===
Aaron Konstam telephone: (210) 656-0355 e-mail: akons...@sbcglobal.net

-- 
fedora-list mailing list
fedora-list@redhat.com
To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list
Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines


Re: removing autorun from a flash drive

2009-03-10 Thread Michael Hennebry

On Tue, 10 Mar 2009, Aaron Konstam wrote:


On Mon, 2009-03-09 at 14:15 -0600, Robin Laing wrote:

I purchased a drive that had U3 and it was not marked on the packaging.
  I wouldn't have purchased the drive if I knew about it.

I had to find a Windows user so I could remove it.  One person was upset
because he had to remove hardware devices to get the software to work on
his computer



I just deleted he U3 stuff using F9. Although I will admit I thought I
deleted it months ago.


How did you do that?
On my F9, it seems to show up as a CD,
but mount -l doesn't admit its existence.

--
Michael   henne...@web.cs.ndsu.nodak.edu
"Pessimist: The glass is half empty.
Optimist:   The glass is half full.
Engineer:   The glass is twice as big as it needs to be."

--
fedora-list mailing list
fedora-list@redhat.com
To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list
Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines


Re: removing autorun from a flash drive

2009-03-10 Thread Aaron Konstam
On Mon, 2009-03-09 at 14:15 -0600, Robin Laing wrote:
> Marc Wilson wrote:
> > On Sun, Mar 08, 2009 at 03:36:02PM -0500, Michael Hennebry wrote:
> >> If I need a different drive, how, if at all,
> >> do I recognize one without an autorun.inf?
> > 
> >  Don't buy one with the U3 label.  It's not like the thing wasn't
> > plainly marked.
> > 
> 
> 
> I purchased a drive that had U3 and it was not marked on the packaging. 
>   I wouldn't have purchased the drive if I knew about it.
> 
> I had to find a Windows user so I could remove it.  One person was upset 
> because he had to remove hardware devices to get the software to work on 
> his computer
> -- 
> Robin Laing
> 
I just deleted he U3 stuff using F9. Although I will admit I thought I
deleted it months ago.
--
===
Q: What's the difference between USL and the Titanic? A: The Titanic had
a band.
===
Aaron Konstam telephone: (210) 656-0355 e-mail: akons...@sbcglobal.net

-- 
fedora-list mailing list
fedora-list@redhat.com
To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list
Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines


Re: removing autorun from a flash drive

2009-03-09 Thread Robin Laing

Marc Wilson wrote:

On Sun, Mar 08, 2009 at 03:36:02PM -0500, Michael Hennebry wrote:

If I need a different drive, how, if at all,
do I recognize one without an autorun.inf?


 Don't buy one with the U3 label.  It's not like the thing wasn't
plainly marked.




I purchased a drive that had U3 and it was not marked on the packaging. 
 I wouldn't have purchased the drive if I knew about it.


I had to find a Windows user so I could remove it.  One person was upset 
because he had to remove hardware devices to get the software to work on 
his computer.


--
Robin Laing

--
fedora-list mailing list
fedora-list@redhat.com
To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list
Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines


Re: removing autorun from a flash drive

2009-03-09 Thread Michael Hennebry

On Mon, 9 Mar 2009, psmith wrote:


Marc Wilson wrote:

On Sun, Mar 08, 2009 at 03:36:02PM -0500, Michael Hennebry wrote:


If I need a different drive, how, if at all,
do I recognize one without an autorun.inf?



 Don't buy one with the U3 label.  It's not like the thing wasn't
plainly marked.


Good point.  I hadn't realized the icon's significance when I bought it.

you know it's very easy to remove the u3 part of the drive, have a look on 
the us website as they even have an app to do it for you ;)


http://www.u3.com/support/default.aspx#CQ3


Thanks.  It's possible that google found it for me.
Google found a lot of stuff for me.

The question remaining is why didn't mount -l find the U2 System device?
Dolphin found it.

--
Michael   henne...@web.cs.ndsu.nodak.edu
"Pessimist: The glass is half empty.
Optimist:   The glass is half full.
Engineer:   The glass is twice as big as it needs to be."

--
fedora-list mailing list
fedora-list@redhat.com
To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list
Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines


Re: removing autorun from a flash drive

2009-03-09 Thread psmith

Marc Wilson wrote:

On Sun, Mar 08, 2009 at 03:36:02PM -0500, Michael Hennebry wrote:
  

If I need a different drive, how, if at all,
do I recognize one without an autorun.inf?



 Don't buy one with the U3 label.  It's not like the thing wasn't
plainly marked.

  
you know it's very easy to remove the u3 part of the drive, have a look 
on the us website as they even have an app to do it for you ;)


http://www.u3.com/support/default.aspx#CQ3

phil

--
fedora-list mailing list
fedora-list@redhat.com
To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list
Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines


Re: removing autorun from a flash drive

2009-03-08 Thread Kevin Kofler
Marc Wilson wrote:
>  Don't buy one with the U3 label.  It's not like the thing wasn't
> plainly marked.

The magic U3 stuff can be removed.

Kevin Kofler

-- 
fedora-list mailing list
fedora-list@redhat.com
To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list
Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines


Re: removing autorun from a flash drive

2009-03-08 Thread Marc Wilson
On Sun, Mar 08, 2009 at 03:36:02PM -0500, Michael Hennebry wrote:
> If I need a different drive, how, if at all,
> do I recognize one without an autorun.inf?

 Don't buy one with the U3 label.  It's not like the thing wasn't
plainly marked.

-- 
 Marc Wilson | If the master dies and the disciple grieves, the
 m...@cox.net | lives of both have been wasted.

-- 
fedora-list mailing list
fedora-list@redhat.com
To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list
Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines