Sharp Ideas

Dr. Simson Garfinkel wrote an interesting piece for CSO on-line, detailing a threat that I have been trying to educate the public about for two years. In his article Attack of the iPods Mr. Garfinkel explains security risks due to direct memory access (DMA) that USB and Firewire devices have, making mention of the famous article 0wned by iPod.
Mr. Garfinkel also briefly makes mention of autorun vulnerabilities that may/may not exist due to the new U3 specification that allows USB drives to run applications via a virtual CDROM (just like a standard windows CDROM autorun application). Interesting.