Found One, Plugged It In
A Practical Guide to Unknown USB Drives, Suspicious Cables, Public Charging, and Safer Connections
A USB drive is lying beside the elevator. A free cable is sitting in a conference bag. Your phone is nearly dead, and the airport charging station is three steps away. None of these moments feels dramatic. That is exactly why the decision can be easy to get wrong.
Found One, Plugged It In is a practical guide to the small connection choices that sit between convenience and avoidable risk. Instead of treating every unfamiliar connector as a crisis, Damian Choi gives readers a calm way to decide what deserves trust, what deserves caution, and what should simply be left alone.
The book starts with the part people rarely see: a USB connection is more than a metal plug carrying power. Depending on the device, cable, host, and configuration, the connection may also carry data, identify itself as a peripheral, mount storage, negotiate power, or create a new network path. That makes provenance and purpose worth checking before a connection is made.
Inside, readers will learn how to think through situations involving:
- found flash drives and removable media
- suspicious or unknown charging cables
- USB-C accessories and power negotiation
- public charging stations and the "juice jacking" question
- rental cars, hotel rooms, airports, and conferences
- promotional accessories and questionable provenance
- phones, laptops, printers, projectors, kiosks, and point-of-sale environments
- workplace peripheral policies and incident handoff
- logging, triage, recovery, and lessons learned after a suspicious connection
The emphasis stays on evidence. Historical examples such as Stuxnet, BadUSB research, the 2011 DEF CON charging demonstration, and a 2016 study of dropped USB drives are separated from rumors and exaggerated threat stories. Demonstrated capability is treated differently from a documented real-world incident. Platform-specific guidance is qualified by device and operating-system behavior instead of presented as a permanent universal rule.
That distinction matters because USB security advice often fails in one of two directions. Some warnings turn every cable into a hidden attacker. Others dismiss the subject because the most sensational stories are poorly sourced. This book offers a better middle ground: identify what is known, label uncertainty, and use a repeatable decision process.
Readers also get a simple five-question pre-flight for everyday connections: provenance, role, trust boundary, default action, and response. The questions are short enough to use at an airport gate or in a crowded meeting room, yet structured enough to support household and organizational policy.
For a found drive, the default is straightforward: do not insert it into a working system. For charging, the book explains why your own AC adapter or power bank can remove an unfamiliar USB host from the equation. For managed work devices, it explains why the organization's incident process should take priority over improvised cleanup. For suspected compromise, it focuses on preserving useful context and getting the right people involved.
No security habit makes compromise impossible. Better habits do reduce avoidable exposure, especially when curiosity, fatigue, urgency, or social pressure is pushing toward the fastest option.
Found One, Plugged It In is for travelers, families, employees, small-business owners, and anyone who regularly connects phones, computers, storage devices, and peripherals. It does not require a security background. The goal is practical judgment: a few seconds of structured thought before an unfamiliar connector gets trusted.
