3 ms·
> You could just have a usb thumb drive on a retractable lanyard (think RFID badges or DoD Common Access Cards), but what if that thin retractable cord just sna
by 0kl 7y ago
> You could just have a usb thumb drive on a retractable lanyard (think RFID badges or DoD Common Access Cards), but what if that thin retractable cord just snaps–leaving the USB drive snugly in-place in the laptop?
You could also just use a thicker cord.
The project, no offense to the author, could be renamed: long USB cable with a magnetic usb attachment.
> As of yesterday, that’s [stolen laptop] a hard attack to defend against.
Which is just wrong; the author did not invent anything here - anyone I’ve known that’s ever been worried about this scenario has implemented it already with <yubikey/access card/arbitrary usb>.
* extra PSA: if you’re worried about this but somehow haven’t already required 2FA for all your accounts and admin access on your laptop, then you should re-evaluate your threat scenarios.
- tylerhou 7y ago2FA doesn't matter if you're already logged in.
- 0kl 7y ago> extra PSA: if you’re worried about this but somehow haven’t already required 2FA... I’m aware - I’m pointing out that it’s extremely likely you already have a physical device you can attach to a cord/chain/braided-steel-cable and use for the “snatch and grab” scenario. And that a snatch and grab is just so unlikely compared to any other security threat imo.