3 ms·
Mainstream OSes and desktop environments (and not just Qubes an people with extra software installed) should really adopt the ask-before-using-USB-devices polic
by dom0 10y ago
Mainstream OSes and desktop environments (and not just Qubes an people with extra software installed) should really adopt the ask-before-using-USB-devices policy.
If you connected this to a Qubes computer nothing would happen, except a popup behind the lock screen asking for permission. But you could also generally forbid USB network controllers, for example.
- Tepix 10y agoIt's the same thing with network interfaces, isn't it? If you connect a rogue device to an existing ethernet port I think you could pull off most if not all of the attacks that PoisonTap does.
- dom0 10y agoWith an Ethernet tap yes, just on the same switch not necessarily (without causing at least some disruption). For example, a DHCP configured client wouldn't accept a DHCPOFFER he didn't ask for, you'd need to do ARP spoofing which can be detected rather easily AFAIK. IPv6 is another story though, it seems like IPv6 RA (which can also contain DNS configuration) are accepted by default by all OSes. My observation so far suggested that these overrule DHCPv6 as well.