epoxy-sealing all my USB ports right now ...

How do you mean this? Make USBdriveby download LaZagne from the internet, run it and send the output somewhere?

Or just stick it into a usb, run LaZagne that's on the flash drive, then pull the flash drive out and walk away.

Huh, I was thinking someone could buy up a ton of cheap usb sticks, load this on there, have it autorun, and then have the payload sent to a server over HTTPS in AWS (who is going to block HTTPS traffic to AWS? everyone runs out of there) that would catch it and notify the attacker via webhook.

Then go sprinkle them around the SFBA.

Sorry for my ignorance... how does anything auto-run anymore?

USBdriveby emulates a keyboard that types commands at inhuman speeds, and since keyboards are plug and play.. you can probably guess what happens next ;)

The thing is, only keyboards and mice run without any confirmation. Pendrives normally open a explorer/finder window etc, no?

I think the point is that this is a USB drive that looks to the computer like a keyboard, so it will run without confirmation.