Chinese thumb drives...

[Skuzzy]

I wonder if this is how someone fraudulently filed taxes with all my info this year.

You may have been one of the victims of the IRS hack.

http://www.cbsnews.com/news/irs-identity-theft-online-hackers-social-security-number-get-transcript/

[Beefcake]

I'm just wondering can anyone recommend a good flash drive that isn't a risk?

[Brooke]

btw truecrypt/veracrypt are worthless if your system has been compromised.

Yep.  It's not for protecting your data from hacks into your running OS but for if someone physically steals your computer or drive or if you lose your USB drive somewhere and don't want people to be able to see what's on it.

[Vulcan]

I'm just wondering can anyone recommend a good flash drive that isn't a risk?

They're all the same tbh, but main brands carry less risk of having malware installed out of the factory. If you buy some kamakuza brand rubbish from a dodgy shop/market you can get into trouble.

[save]

I normally put new usbsticks into a linux system (raspberry) first, and do a low-format on them.

[Vulcan]

I normally put new usbsticks into a linux system (raspberry) first, and do a low-format on them.

Still won't help you if it's hard coded into the device.

Sorry to terrify you   - but it's how certain government organizations penetrated isolated facilities like iranian nuclear research sites.

[GScholz]

You'd be surprised.

btw truecrypt/veracrypt are worthless if your system has been compromised.

Of course. Internet hygiene is very important. Buy your USB devices (it's not just thumb drives that can be compromised) from reputable retailers, and don't let your friends use their potentially dodgy USB devices on your system. If you're really paranoid and think the alphabet agencies are after you, make sure you buy your USB stuff in person rather than ordering them online (that's when they can be intercepted and compromised). And make sure to secure your system physically as well to prevent evil maid attacks.

[SPKmes]

Couldn't these people just use the internet to get in?....Seriously if they want in and they have the capability to embed something to a piece of hardware....they surely have the abilty/people to get in anyway they like....they are probably the people who make the spy/virus ware that big corperations/ governments use anyway....