4 ms·
Or have the OS block it initially and popup a message saying what the device claims to be. The user either accepts or rejects, and if rejected the block stays
by Lawtonfogle 11y ago
Or have the OS block it initially and popup a message saying what the device claims to be. The user either accepts or rejects, and if rejected the block stays in place. Only exception would be for the first keyboard/mouse plugged (unless there is a built in one, in which case even this wouldn't be an exception).
- marcosdumay 11y agoThat makes it impossible to use laptops with broken keyboards, and makes it a hell to use anything with KVMs plugged. The jimrandomh's idea very interesting. The only problem is defining what is the user's login password, but I'm sure it can be solved.
- jessaustin 11y agoDo KVMs unplug themselves from currently-untargeted machines, or do they just stop sending signals to those?
- Lawtonfogle 11y agoDifferent protocol for startup, where you select the keyboard you want. For a desktop with a good keyboard and a malicious USB both plugged in, it is going to need some way to know which one to go with anyways. The real threat is someone plugging in the bad USB after they are logged into their machine, at which point you already have a good keyboard (or are using mouse + onscreen keyboard). Maybe even don't go with any keyboards to start, only a mouse and an onscreen keyboard and all others have to be approved.