4 ms·
Maybe I'm missing something but the first word that comes to mind is "exploit"...
by mikece 8y ago
Maybe I'm missing something but the first word that comes to mind is "exploit"...
- lackoftactics 8y agoI was also wondering about possibility of infecting USB key using web app
- mikece 8y agoAh -- I hadn't thought of the infection swinging both directions, but if the API is there that's a possibility: function onUsbConnect( if (exploitPossible) { do_evil_to_usb(); } );
- detaro 8y agoIt should require explicit user confirmation to connect, but yes, there's a risk, e.g. if a user is tricked. https://www.yubico.com/support/security-advisories/ysa-2018-02/ https://www.yubico.com/support/security-advisories/ysa-2018-...