paperlined.org
+evil > software > USB_jacking

document updated 10 years ago, on Mar 12, 2015

USB has all kinds of vulnerabilities.

USB attacking the computer:

USB Rubber Ducky — keyboard/mouse masquerading as a thumb drive
U3 flash drives — CDROM drive masquerading as a thumb drive
USB Killer — a voltage multiplier, to kill the computer using the computer's own power
sneakernet being used to attack highly secure (air-gapped) computer networks

computer attacking the USB device:

BadUSB — modifies peripheral firmware

The best way to secure USB is to cement over the USB ports. Alas, there's always a tradeoff between security and usability. ("the most secure computer is one that's in a locked room with all its cords removed — including the power cord")