Sorry!

I don't know enough about USB thumb drives to answer those questions.
 Perhaps someone else on this list can?

Thumb drives with user flashable firmware are rare, however one should
still always be suspicious of any drive ordered through the mail.  It is
better to go to a randomly chosen store and buy a randomly selected thumb
drive.


On Thu, Jan 2, 2014 at 5:01 PM, heath bunting <[email protected]>wrote:

> On Thu, 2 Jan 2014, Thomas Benjamin wrote:
>
>  Yes.  They contain firmware that can potentially be flashed by the user
>> and / or an adversary depending on the model.
>> Be aware, of course, that even if you get a model that cannot be flashed
>> by a user, if you get it by mail the adversary can still modify or replace
>> the
>> firmware before it before it gets to you.  We know that the NSA does this.
>>
>
> so would you recomend a usb flash drive that allows the user to flash the
> firmware ?
>
> if so, what open firmware should be flashed upon it ?
>
> and which models of usb flash drive can you suggest ?
>
>
>
>
>
>
>
>> On Thu, Jan 2, 2014 at 4:27 PM, gpxctawjc5oh <[email protected]>
>> wrote:
>>
>>       do usb flash drives contain firmware ?
>>
>>       if so, can this be flashed either by the user or an adversary ?
>>
>>
>>       --
>>       -----BEGIN PGP PUBLIC KEY BLOCK-----
>>       Version: GnuPG v1.4.10 (GNU/Linux)
>>
>>       mQENBFKvHokBCACrR3z2l6NQ/lgCUJfihVsyiUX//pMQsijXrG40CU1+w6gYQTs+
>>       Ick1Gw7MipdcsPngxdhU5vN70f68W0oKm3oVsdTbfDs5LLUo2qrwldj/gikxOzWV
>>       VUbdq2Z79JOUqAM6JW+nCdtnat1hLZ30M5vc6n7OKvLxGkmsxo6TdngpTuapN1WF
>>       3+PrtvXBjVWOGQcYvLTRrYMKfMJv0F0qFUNePHOoSDn0fjHr6NFXhIyLHaZwrIOL
>>       gvKMeEZqtkCGSml0hPuu8MEk8Qhhx/+n5cyRokT018k3j5rz2p1Nvc9Cht0Vcsu4
>>       MqlFX3cwvRwnD9aS5QOiFjCWekB54peeK6yVABEBAAG0KWdweGN0YXdqYzVvaCA8
>>       Z3B4Y3Rhd2pjNW9oQGlyYXRpb25hbC5vcmc+iQE3BBMBCgAhBQJSrx6JAhsDBQsJ
>>       CAcDBRUKCQgLBRYCAwEAAh4BAheAAAoJEFF8RU0UdbM5cjEH/0N703rA25i8lN3f
>>       tY8iUiZQ8EIhTxKlXbB/z7foZ9v+xbjop3oLfKO6eodmNU4wynJ0Z1/TqsJdmz4+
>>       L3WoEXlxqq841XBdJTKHpJwKDeunRhP9N1catAj2yPgAcvpzHaEwX/1WbHeWZDpj
>>       pMCBMWuTVGHxJcw9zj8eY2vTLGlULHA8Qp3OiR/Q/t+UX1+laSus9Pj5Zm6BmMH2
>>       7rgH7dZGqf0kLkeIzF4dCmuuIkfACZ/NZp2mJGinIRnlLIxMZgJpIhe55t+rnq1U
>>       CLp+UD2e7lv5D9Rys+b/akon5vF8njwSDrd5RkQEw/K5t+n3OY/Zm5c78XadHzVI
>>       u7vJjOu5AQ0EUq8eiQEIALPwoYQCqYH53KtylvOwXEA24tzlFZl1aXSCI/8S9tZh
>>       uqrwW3EFRHJiwoRodCx9cXU9j1d7zqw4Ai9H/rQqZMmcpJQQM9rqLByIHk9QGLff
>>       FQFURNgcFxk4G/3QY3OCfMUwrAsD71kFLmUQAO027zdl+AHSkz/xrXpMDMJecSio
>>       l54YHPvQQOl4HrBQfR6Yx1brAD1/ZktY5i17qn1cEKriAKvrQ69p+5RZFDbiwpDk
>>       ARArksvht2bbvypZn7BVtQvOGrcztYC1tGblqNe0xawu7tLNQxILH4tUcY3fCPhb
>>       sjgvS5omFav2Hs/iRdL4qALbGoGWTSOGwPlg5emRVWsAEQEAAYkBHwQYAQoACQUC
>>       Uq8eiQIbDAAKCRBRfEVNFHWzOUbYCACfniaFrP3c5PjM9nsZmpPaTZVJpmAvwOG2
>>       IpGDJT0vRak4DR0XAS/IlZsXsI71kOfiieLlKJ8e2O+WX5VXj/SS6+hzPfzj8/3x
>>       YuDyZKjnR4IydDf0LEXwa4olK4mBma3AhHyktcKBpM+QI51/hyMHL7iRf07fkLpm
>>       0zHRRMl3v4EB45RPwC5XzRSHg9i90IRQJLJ22OjrAdDw2n20dke6kbgl2U97+OYe
>>       dDXDz3+S1XWDXR5SGPZXGLjWS9b0K8sPyV6Kabh8dQPfNrcV06KDT8ZBRKrLPma4
>>       YY5ad2Z+fd2tmMQkNvM7sqtScQKdTirUzjznVRGG9vw+xE3fjZ8A
>>       =HvwX
>>       -----END PGP PUBLIC KEY BLOCK-----
>>       _______________________________________________
>>       Tails-support mailing list
>>       [email protected]
>>       https://mailman.boum.org/listinfo/tails-support
>>
>>
>>
>>
>> --
>>
>>      Sincerely Yours,                                Thomas S. Benjamin
>>
>>
>>
>>
> --
> -----BEGIN PGP PUBLIC KEY BLOCK-----
> Version: GnuPG v1.4.10 (GNU/Linux)
>
> mQENBFKvHjcBCAC+1va8P5qpyA9Cb559rPnEul+wC5JZzvjNDeWYGOCej4pzqaj9
> 1D/nU/7mcec566SFmpohEZocqw2wXqmCc/FmLhia7GpR040G4Qr13VARKQnd+L5l
> AIXF1cra91y9AHzeNnyyKcfw150pyuImCyJRZnclL7Z0KsPDzD39bZHcv9xTWO9O
> MhJabv9OUoMeMWKEsqq3dhQR+R8K4paPH1eOaOWfouCp+eXVnVmYi2cuXskAN1R9
> BAQawcW1kmAFoHYi0Cq+//AGi/9ivVhzfd3XiduaPNxuQYHFpWfKH54gy6lqQIuY
> vHtvMqP47J/bwRbOFUFf/vqDmlMCr36pwoIhABEBAAG0KmhlYXRoIGJ1bnRpbmcg
> PGhlYXRoYnVudGluZ0BpcmF0aW9uYWwub3JnPokBNwQTAQoAIQUCUq8eNwIbAwUL
> CQgHAwUVCgkICwUWAgMBAAIeAQIXgAAKCRDBjmty3KdP2IhpB/4/Mgev1ATMwjjD
> 3NkFGlV5Y388WA5FEBkhWdagD78yMMCnzA1Jp+Bk43w3yLmyvxErJi1O6EuncZV/
> MbLiCwMKc3YnSosowhhbgjy0a1Gx4wzPcgNKfAXYsxDp+k5qAwWk0bi1picPqr1z
> LfrkuPnJHMPRaAamTLGgUoPXPj1XLjisnn/KeD99TLC0rouAZXZng+XSpksZKehM
> W4RHS5WWGhfQhZihdYpvpPYWqOuu34mWnpBIrPvR/SbXqrwPZ+ULXxyg4nvLWcET
> x3emzWq+INwnXo71rd6lhfS+l6bvoYCE3ARIbNumW2RbFZORuZQ5GKVXmtyRFR2p
> 3ZeSWfyWuQENBFKvHjcBCAC/OZyU1mWli7+jqStg0VWj91MlHXcKpUGikIzUt210
> PAy5+hdnb8OIZekNtSenvbz5KhP38PFwErE7PRB+z3Lg3zRUiNNWmC49n0dKmxWU
> PP+cvpe22kKvg9SfLi1JVxk/p16jskKiKB1OaOBxGJy3aYQhO2+wORlzcJX0KWsN
> RwNiJnKzpj3SgQYBiJ/QoB+VApcL1ObQhaup9gDac3t5XA30VybWhnsvpHIFRlia
> Mt1rBy3sMU6ZPev0wC8Xz3LfismQewx3s/GDovD0Rtk6m+8YbeU2X52SOtmgVygu
> TWNCmLNqSLCIZTfbRDm2YEqtlXH56DK6d16vQ3zeYoH9ABEBAAGJAR8EGAEKAAkF
> AlKvHjcCGwwACgkQwY5rctynT9jyyAf+M6hVdp3W6hsiO78eWzM+qhYpAJAtneKs
> oICw/w00dJcY3RwNt/K21jWIzmn7lNyZ5WjxKoEuJl+ZzofmYkO5TuVfXRBvLb/Y
> 33MSCvdfh3LS1iIXPD3Peh2rwqF9vgkMXoYefBbjTAC8ubEqzfgw0o1lSqQWGsEY
> x8c1DSBuV/DZsW2EFHBXHU4VKC9jDIgnLGs7z3gV52rvtZHlfvHHtiuNhtkGsut6
> uRPd/jXgj3niR1XEXhPaAm84u07bUPZtzbLgfJebI6JJmoTpQKbD7dB3xBCvFXoc
> pWY8+/TnSbbjtg/n1fU4Usk05GjMUGPwX4qHhT/utM+Bw2VlSWAc2Q==
> =xI8l
>
> -----END PGP PUBLIC KEY BLOCK-----
>
> _______________________________________________
> Tails-support mailing list
> [email protected]
> https://mailman.boum.org/listinfo/tails-support
>
>


-- 

     Sincerely Yours,
                                Thomas S. Benjamin
_______________________________________________
Tails-support mailing list
[email protected]
https://mailman.boum.org/listinfo/tails-support

Reply via email to