I recently discovered some USB sticks that belong to a family member, and I need a file from one of them. However, I'm concerned about possibly exposing my computer to malware since my family member isn't very tech-savvy and may have inadvertently transferred something harmful. I want to know the safest way to test these USB sticks without risking my computer's safety.
Specifically, I know they bought these sticks and they're not just random ones found elsewhere. Here are a few questions I have:
1. Can I test them without using a sacrificial machine?
2. Is there a way to isolate the USB port or route it to a virtual machine instead?
3. For context, my family member used Windows, but I'm on Linux. Thanks in advance for any guidance!
2 Answers
The best approach is to use a sacrificial machine that's completely offline. A disposable OS, preferably a Linux installation, is the safest choice since many malware types won't work on Linux. This way, you can explore the USB stick without any risk to your main system.
You might not be able to avoid using a sacrificial machine entirely. However, it's not as daunting as it sounds! You can take a computer that has nothing on it that you care about—even if it's Windows—boot it up using a Linux live USB. After you've extracted the file you need, just ensure you wipe all partitions before re-installing Windows if you go back to that.

Related Questions
How To Get Your Domain Unblocked From Facebook
How To Find A String In a Directory of Files Using Linux