Raphaël Vinot

3 empty key? The source key has things on it, right?

Right. That's weird. What is the partition format on the source and dest key?

This is super weird... I had issues with the rpi 3 booting faster than the USB keys were recognized and that was causing a similar issue... but the timer I...

https://github.com/CIRCL/PyCIRCLean/blob/master/bin/filecheck.py#L463 - https://github.com/CIRCL/PyCIRCLean/blob/master/bin/filecheck.py#L497

It should work pretty much out of the box if you install this module: https://github.com/CIRCL/PyCIRCLean And the bash glue code in this repository (https://github.com/CIRCL/Circlean/tree/master/circlean_fs)

https://github.com/CIRCL/Circlean/blob/master/doc/Technical_Notes/TNO_Raspi_boot.pdf

I didn't see any recent vulnerability in libmagic allowing command execution. Do you have references? Fake MIMEtype is assumed, we use it for information and cross check with the extension...

The idea of CIRCLean is to detect potentially malicious files without relying on antiviruses, and we figured out that on USB keys, we can be a lot stricter and detect...

new link: https://www.tbs-sct.gc.ca/pol/doc-eng.aspx?id=28115#appB

Great, I'll have a go at it in the coming days, probably next week.