4 ms·
> Keyboards do not have enough bandwidth to allow an attack unless your physical security is incredibly lax. What does this mean? What's to stop someone from b
by zachrose 15y ago
> Keyboards do not have enough bandwidth to allow an attack unless your physical security is incredibly lax.
What does this mean? What's to stop someone from building a fake keyboard with an internal USB hub that connects the original keyboards USB connection and a thumbdrive to a normal-looking outgoing USB cable?
- LaGrange 15y agoDisable all keyboard shortcuts -- text entry only in text areas. No tabbing between controls. Keyboard shortcuts considered harmful. Also, for the sake of completeness, randomize all on-screen forms to make it impossible to exploit a fake mouse. Muscle memory considered harmful. For added security, display an authorization code on the display every half an hour, and expect the user to do a XOR with a one-time pad, then enter it on the keyboard. Or morse-code it with the mouse.
- groby_b 15y agoAssume that required devices are hardwired when you remove IO ports. It's kind of stupid to remove all IO ports except one :)