173
How a USB-connected speaker can infect a PC without ever being touched
(arstechnica.com)
This is a most excellent place for technology news and articles.
"Without being touched" seems unnecessary. That's one possible definition for computers: completing tasks that do not require manual intervention. Automation.
BTW the real culprit here isn’t the USB connection but Creative’s proprietary but totally unprotected transfer protocol that allows third parties to communicate with the device both ways, even load new firmware. No code signing there, either.
Reminds me of Logitech's Unified software that had so many holes and was patched frequently. It was never secure.
Don't forget having it basically auto install on windows when plugging in one of their mice or keyboards.