4 ms·
What's the threat model for a usb dongle? It won't have network access... I suppose it could spontaneously become an HID device and try typing its way to troubl
by blacksmith_tb 3y ago
What's the threat model for a usb dongle? It won't have network access... I suppose it could spontaneously become an HID device and try typing its way to trouble, but that'd be very OS-specific...
- nickthegreek 3y agoUSB is like the most well known physical threat. Look up OMG Cables.
- blacksmith_tb 3y agoRight, but that's intended for the attacker to connect to from nearby? Also of course presumably if it's got enough hardware crammed in there to cost $170 random Chinese tech companies are not going to include all of that in their $25 dongle "just in case" you turn out to be worth compromising?
- nickthegreek 3y agoI think you are overestimating the cost of inclusion. Surely you have had mandatory IT training about not plugging in unknown usb drives at work right?
- wintogreen74 3y agoYes, but my work laptop is not a Zigbee hub that I randomly plug unknown USB devices into.