4 ms·
> a policy of "don't plug outside USB devices into the facility's PCs" can get you pretty far A policy of "inject hot glue into exposed USB ports" gets you fur
by liotier 11y ago
> a policy of "don't plug outside USB devices into the facility's PCs" can get you pretty far
A policy of "inject hot glue into exposed USB ports" gets you further.
- dzdt 11y agoAnd where do the keyboard and mouse plug in?
- AnthonyMouse 11y agoPS/2
- liotier 11y agoThe authorized cables go through a hole in a secure enclosure that does not expose ports. Physically securing the computer is essential - if only to restrict access to mass storage by anyone with a screwdriver.
- nickpsecurity 11y ago"Have screwdriver, cable, and laptop. Can bypass all INFOSEC." This slogan should indeed never happen.
- nickpsecurity 11y agoThat's exactly what I did. I started with glue to get in the contacts then occasionally followed with that metallic stuff that's like glue. PS2 ports work fine for keyboards and mice. One can also do tricks like authenticated peripherals or profiling signatures of them. I had some designs on former. CompSci had results on latter. Not sure if there's any products in this area and if they'd be trustworthy.