2 ms·

I'm aware the tools exist but how actively exploited is it? Prompting you doesn't help in scenarios like buying a compromised gadget off Craiglist or a finding

I'm aware the tools exist but how actively exploited is it? Prompting you doesn't help in scenarios like buying a compromised gadget off Craiglist or a finding a USB key on the ground. The user is going to accept the prompt anyways to use it to begin with. Does it prompt you again if the USB devices firmware changes even while it's constantly plugged in? The only scenario I can see this being helpful is if someone is able to sneak an extra USB device or compromised cable onto your dock/desktop without you noticing but also can't unlock the computer to click OK. I'd imagine for the vast majority of people, even those that leave their computer at work 100% of the time that this is something they'll never encounter except maybe as a prank where the guy in accounting plugs in an extra mouse to mess with you. Perhaps it's worth the option but should it be the default? Even then I'd imagine a lot of people blindly clicking OK anyways...

acdha 4y ago
> The user is going to accept the prompt anyways to use it to begin with. Some people will but some are going to ask why, changing this from a silent attack to one far more likely to be noticed and reported. That’s especially useful if you’re worried about widespread malware doing something like this to chain from a phone or some kind of IoT device to computers, or a factory in China being compromised but not noticing/caring until infected devices are all over Amazon. Long term, the protocol needs hardening but things like this help make those kind of problems visible. Apple has a range of users from people who aren’t targeted to those worried about hostile corporations or governments, and as other attacks get harder things like this become more appealing so it’s not surprising to see it getting hardened.
- goosedragons 4y ago
  Why would they ask why when every new USB device they plug in gives an ultra generic warning asking to connect?
Avamander 4y ago
It's difficult to say how common an attack is not having any visibility across other OSs and a hindrance (macOS) in the way. Same type of question with for example Secure Boot. Objectively we'd be worse off without, OS-ignored.

acdha 4y ago

> The user is going to accept the prompt anyways to use it to begin with. Some people will but some are going to ask why, changing this from a silent attack to one far more likely to be noticed and reported. That’s especially useful if you’re worried about widespread malware doing something like this to chain from a phone or some kind of IoT device to computers, or a factory in China being compromised but not noticing/caring until infected devices are all over Amazon. Long term, the protocol needs hardening but things like this help make those kind of problems visible. Apple has a range of users from people who aren’t targeted to those worried about hostile corporations or governments, and as other attacks get harder things like this become more appealing so it’s not surprising to see it getting hardened.

goosedragons 4y ago
Why would they ask why when every new USB device they plug in gives an ultra generic warning asking to connect?

Avamander 4y ago

It's difficult to say how common an attack is not having any visibility across other OSs and a hindrance (macOS) in the way. Same type of question with for example Secure Boot. Objectively we'd be worse off without, OS-ignored.