4 ms·
I would guess having a CD/DVD drive opens another attack surface. Similar to why people gluing their USB ports closed.
by rhcom2 2y ago
I would guess having a CD/DVD drive opens another attack surface. Similar to why people gluing their USB ports closed.
- zmgsabst 2y agoRight — but the question isn’t CD/DVD versus nothing. It’s CD/DVD versus USB; and which has a smaller attack surface. I’d argue that read-only CD/DVD has a smaller attack surface than USB, so of the two, it’s preferable. I’d further argue that a CD/DVD (ie, the actual object moved between systems) is easier to inspect than USB devices, to validate the behavior.
- RF_Savage 2y agoThe CD/DVD discs used can also be retained and later audited to verify what was moved to and from the systems.