AutoPlay - Fun and social engineering

By Adrian Kingsley-Hughes for Hardware 2.0 | January 19, 2009 -- 09:20 GMT (01:20 PST) | Topic: Social Enterprise

This is something that Microsoft needs to fix in Windows 7.

Downadup's autorun.inf file uses an action keyword and icon extracted from shell32.dll to produce the following:

The category is "Install or run program" but the text and icon are for "Open folder to view files".

The first option will run Downadup, not good. The second "general" option is the choice that will safely open the USB drive.

Being curious, we tried this autorun.inf with Windows 7:

And the results for Windows 7 were the same as Vista's.

It really shouldn't be that easy to game the AutoPlay feature. Microsoft needs to fix this.

Join Discussion

Add Your Comment

More from Adrian Kingsley-Hughes

Hardware

Save up to $2,000 on RAM for your 27-inch iMac 5K with OWC
Windows 10

Parallels Desktop 16 for Mac
Windows 10

Parallels Desktop 16 for Mac: Turn your Mac into one of the very best Windows 10 PCs you can buy
Smartphones

Unihertz Titan

Please review our terms of service to complete your newsletter subscription.

By registering, you agree to the Terms of Use and acknowledge the data practices outlined in the Privacy Policy.

You will also receive a complimentary subscription to the ZDNet's Tech Update Today and ZDNet Announcement newsletters. You may unsubscribe from these newsletters at any time.

You agree to receive updates, alerts, and promotions from the CBS family of companies - including ZDNet’s Tech Update Today and ZDNet Announcement newsletters. You may unsubscribe at any time.

By signing up, you agree to receive the selected newsletter(s) which you may unsubscribe from at any time. You also agree to the Terms of Use and acknowledge the data collection and usage practices outlined in our Privacy Policy.

Newsletters

See All

Related Topics:

Join Discussion

More from Adrian Kingsley-Hughes

Newsletters

Related Stories