4 ms·
That is impressive. And scary. But if your box's physical security has been compromised, you're already screwed in any case.
by qwertyuiop924 10y ago
That is impressive. And scary.
But if your box's physical security has been compromised, you're already screwed in any case.
- fny 10y ago> But if your box's physical security has been compromised, you're already screwed in any case. There's a gradient to the screwage, however. For example, I've encrypted my disk, so someone would need to steal my computer and then try bruteforcing it with some new-fangled graphics card. With this insanity, I risk someone stealing my unencrypted traffic with a plug-and-play device any time I get up from my desk to pee. Then again, they can already do that with Wireshark.
- dgoldstein0 10y agonot just unencrypted - traffic for any website that doesn't use HSTS. All they need to do is intercept a single HTTP page and then they can modify it to contain iframes to their favorite sites over http, and any site without HSTS can then be owned.
- dgoldstein0 10y agoHopefully though everyone sets the secure flag on important cookies... I wouldn't bet on it, but I suspect it may be more common than HSTS.
- SilkRoadie 10y agoI can't help but feel in the majority of cases fleeting access should not be a problem for a modern operating system. Lets say you are working in an office and get up to go the loo. You lock your work station. You are expecting that your locked computer will mean that a visitor cannot gain access to it in the few minutes you are away. They could steal the computer, they could destroy it but slipping something into the port of a locked computer shouldn't give them this sort of access. I feel that we can do better.
- qwertyuiop924 10y agoAbsolutely. This can be better. But it can't be much better.