How to check 2nd hand hardware does not contain malware?

linuxuser371038 · 05-13-2024, 04:25 AM

I do like the idea of picking up bargains 2nd hand and bringing them back to life.

I don't like the idea that none store bought hardware is more likely to be compromised.

Are there ways to check to a reasonable level of confidence that devices you buy are clean?

If so how?

Also must it be done on an airgapped, none internet connected, machine or would booting into a vm/livecd suffice?

hazel · 05-13-2024, 05:18 AM

In the old days I used to zero out the drive and then repartition it. You can do that with a UEFI machine too if you have an independent boot device, but you will have to create a new ESP, put elilo or grub onto it and use efibootmgr to store the new details into nvram. It's easier (but obviously less secure) to keep the ESP in place, and that's what I did when I bought my current machine.

pan64 · 05-13-2024, 05:36 AM

yes, if it is a disk drive just repartition it and format. Use smartctl to check it first. you can put it into any host, just do not try to boot from it and do not [auto]momunt it.

linuxuser371038 · 05-13-2024, 06:05 AM

Quote:

Originally Posted by hazel

In the old days I used to zero out the drive and then repartition it. You can do that with a UEFI machine too if you have an independent boot device, but you will have to create a new ESP, put elilo or grub onto it and use efibootmgr to store the new details into nvram. It's easier (but obviously less secure) to keep the ESP in place, and that's what I did when I bought my current machine.

The item in this case is a 4g dongle which doesn't have official storage unless you add an sdcard but does have some firmware.

This thread seems to have some good general guidance. Checking activity before and after plugging in usb device.

pan64 · 05-13-2024, 06:15 AM

that answer is a simple no. You cannot detect. Or it is too late.

linuxuser371038 · 05-13-2024, 07:40 AM

Quote:

Originally Posted by pan64

that answer is a simple no. You cannot detect. Or it is too late.

So, never buy 2nd hand? I am unable to find the device new though...

pan64 · 05-13-2024, 08:08 AM

Quote:

Originally Posted by linuxuser371038

So, never buy 2nd hand? I am unable to find the device new though...

Most probably there will be no problem, but you cannot be sure.

___ · 05-14-2024, 03:37 AM

Maybe usbguard https://www.zdnet.com/article/how-to...ck-protection/

Or maybe an old (pre-UEFI) PC with no HDD, running a minimal Linux Live from cd-rom.

IF a USBkiller *burns* it up, you're in luck (you win): the PC was worth <$10 & the USBkiller is worth >$100!