Does dropping malicious USB sticks really work?