3 ms·
> But many government employees aren’t issued an approved card reader device that lets them use these cards at home or remotely, and so turn to low-cost readers
by mdmglr 4y ago
> But many government employees aren’t issued an approved card reader device that lets them use these cards at home or remotely, and so turn to low-cost readers they find online.
It’s pretty common knowledge in many gov’t agencies to not procure devices from Amazon or other unauthorized vendors and connect them to gov’t machines. So I’m surprise to read that.
This is an ongoing problem with many USB peripherals from Amazon and Aliexpress. For personal use I only buy peripherals from Apple, Dell, Belkin or Logitech. Any other brand I consider untrusted.
I also highly recommend virustotal. Anything I download goes through it.
- X-Istence 4y agoIt's not even about connecting them to gov't machines. The issue is that people are issued PIV CAC's to access their email and are expected to do so without having received government equipment (laptop/computer with CAC reader). So they are left either not checking their email/answering emails from superiors or they have to buy a CAC reader themselves and use their personal equipment to access their email/government websites.
- deleted 4y ago[deleted]
- BiteCode_dev 4y agoIf this is your threat model, don't hope the user do not make mistakes, rather whitelist devices that the machine is allowed to plug in for card readers.