3 ms·

Because having physical access to a device is not "unauthorized". It's like asking why does the body automatically get every virus and bacteria from every surfa

Because having physical access to a device is not "unauthorized". It's like asking why does the body automatically get every virus and bacteria from every surface that you lick, "it should be more thoroughly checked"... Or maybe the user just shouldn't give physical access to devices that are not trusted.

mcv 7y ago
But physical access is everywhere, as these charging points show. And a USB drive is really easy to hide and stick into anything. Automatically trusting something that's super common and easily compromised is a really bad idea.
Piskvorrr 7y ago
Your argument, in case of computing devices (which means with well-defined physical connectors, as opposed to wetware), boils down to "just because." Android and iOS used to ask for permission, a long time ago - but it was dropped as "not user friendly". So, the problem is not "impossible to do", merely "inconvenient w/r/t other goals". As for not giving physical access...easier said than done. Looking around, I see multiple such devices lying around here, with the owner within 20 m, but not paying attention. IMNSHO asking for authorization is far more logical than assuming "whoever can get their hands on it is authorized."