3 ms·
Arguably the qr-code based approach would be much safer, as it would be much simpler to implement and audit. Moving a USB key between two windows machines soun
by iforgotpassword 2y ago
Arguably the qr-code based approach would be much safer, as it would be much simpler to implement and audit.
Moving a USB key between two windows machines sounds as bad of an idea as it can get for airgapped data exchange.
- ben_w 2y agoOnly if it's done right; when I first made this image, the scanners built into phones straight up executed the JavaScript: https://benwheatley.github.io/blog/2017/04/2017-04-10-11-15-23.jpg https://benwheatley.github.io/blog/2017/04/2017-04-10-11-15-...
- mistercheph 2y agoSure, but if you have resources to spend validating the security of a tool, would you rather validate the QR parser or the USB stack?
- XorNot 2y agoThere are forensic USB write blockers which sit between the USB device and prevent host-writeback to the device.