4 ms·
Wouldn't one simple defense be to have the OS pop up a window requiring the user to hit a specific unpredictable key (or short key sequence) when a new keyboard
by pinko 16y ago
Wouldn't one simple defense be to have the OS pop up a window requiring the user to hit a specific unpredictable key (or short key sequence) when a new keyboard is plugged in?
- Splines 16y agoIt's a difficult problem to solve, and probably not worth the effort. Anything you do is fraught with running into the "Keyboard not detected, press F1 to continue" situation, especially in an uncontrolled environment like Windows.
- joe_bleau 16y agoWhat if no one is there to press those keys, or there's no keyboard? I recently did a project with a USB HID interfaced microcontroller pushing data into windows, and there would have been no way for anyone to hit keys that weren't there.
- jbri 16y agoThe only "defense" I can see working is having only one set of USB ports be permissible for human interface devices - if a legitimate HID is plugged into a different port, the OS just pops up a notification about an input device connected to a wrong port. If a malicious USB device is connected to a non-input port, then the OS pops up that notification and the user knows that something fishy is going on.