3 ms·
I’ve always thought it a little odd the janitor threat model is called Evil Maid. Perhaps because maid is a household thing and using encryption and authn/z sc
by SV_BubbleTime 3y ago
I’ve always thought it a little odd the janitor threat model is called Evil Maid.
Perhaps because maid is a household thing and using encryption and authn/z schemes to stop it is less likely in an informal home environment?
- moyix 3y agoIIRC the name refers more to cleaning staff at a hotel, who would have access to your laptop while you’re out of the room.
- quacksilver 3y agoI was under the impression that it usually referred to the 'maid' in a hotel room cleaning service, when rooms were cleaned more regularly before COVID. If you were away on business somewhere sketchy, the cleaning service could physically access your room and your documents / laptop in an at rest state, potentially without you knowing. This could be particularly a concern years ago if the country that you were in was hostile and the cleaning crews in major hotels had embedded state security (the other side of the iron curtain than you were from or something)
- SV_BubbleTime 3y agoHmm, well, I suppose I see my home cleaning lady more than I travel! Fair enough.
- GuB-42 3y agoMaybe that's my interpretation but when I think "maid", I thing of someone who can access my bedroom, a private space. When I think "janitor" I think more of public spaces where I would be less inclined to leave my stuff unattended and where it would be easier for the evildoer to get caught. In other words, a maid would be a more trusted and therefore more powerful attacker than a janitor.