5 ms·

This might be a dumb question but wouldn't one solution to the HID-based attack be for the OS to ask the user for permission to allow the new keyboard? As in "N

This might be a dumb question but wouldn't one solution to the HID-based attack be for the OS to ask the user for permission to allow the new keyboard? As in "New Keyboard Detected: Allow? Y/N" That wouldn't protect against driver 0 days but hey, one step at a time. Do any OSes have an option to ask the user if connection is ok before allowing it?

schoen 10y ago
Tails does something like this!
Benjammer 10y ago
What if it's the first HID you connect? How do you confirm?
- liotier 10y ago
  Whitelist if present at logon and confirm if inserted later ?
jagermo 10y ago
I don't know about OSes, but some security solutions do exactly that.