3 ms·

USB firewall. White-list the USB keyboard when it is first attached, using its unique serial number, and avoid a prompt in the future.

• dfox 11y ago
  Various devices tend to either have serial number empty (for example both my keyboard and mouse, Sun and Logitech respectively, so not exactly cheap Chinese crap) or filled with some random garbage that is not unique at all ("123456", "Serial" and so on). One would assume that "garbage in iSerial" is workaround for Windows' behavior of identifying devices by either it's serial or physical port and requiring distinct driver registrations for devices that are "different" according to this logic.
  • the8472 11y ago
    it might still be useful to filter based on type. if you expect a mass storage device you don't want it to register as input device.
• okasaki 11y ago
  You can do something like this with grsecurity. It's not a whitelist but you can deny any new usb devices after you toggle a switch: If you say Y here, a new sysctl option with name "deny_new_usb" will be created. Setting its value to 1 will prevent any new USB devices from being recognized by the OS. Any attempted USB device insertion will be logged. This option is intended to be used against custom USB devices designed to exploit vulnerabilities in various USB device drivers.