USB devices are ubiquitous, and it may not be long before the nearly undetectable USB security flaw known as BadUSB spreads throughout the world. Russell Brandom explains:
Anyone who plugged in a USB stick was opening themselves up to the attack, and because the bad code was residing in USB firmware, it was hard to protect against it without completely redesigning the system.
The good news is that there’s a fix on the way. The bad news is the fix won’t be implemented any time soon.
In the meantime, any time you plug a USB drive into your computer, you’ll be opening up a huge vector of attack. It’s easy to imagine a pile of dirty USBs being dumped onto a table at CES or desk at your local Kinko’s. Unless you can track a device’s provenance from the factory to your computer, the only real protection avoiding USB drives and devices at every turn — covering over your USB ports the same way you might cover your laptop camera.