3 ms·
The 'stolen laptop' attack vector, as well as 'evil maid' attacks are my general security nightmare in professional environments. Users are told how the securi
by mjevans 5y ago
The 'stolen laptop' attack vector, as well as 'evil maid' attacks are my general security nightmare in professional environments.
Users are told how the security works, but OpSec is _difficult_. Which means it'll only take that one time the user is lazy and an attacker gets lucky.
- mabbo 5y ago> as well as 'evil maid' attacks Coworkers of mine did a recruiting trip to <untrusted country> and were told by corporate: do not bring your laptops. We'll provide you with laptops when you get there to use for the week. Any laptop you bring stays there because we don't trust that you didn't leave it alone in a hotel room at some point. And if that happens, we presume it's compromised.