>Ctrl-f, Windows. Ahem, "air-gapped'. Any decent Unix system has either udev or hotplug based systems to disable every USB device not related to non-storage p

>Ctrl-f, Windows. Ahem, "air-gapped'. Any decent Unix system has either udev or hotplug based systems to disable every USB device not related to non-storage purposes. Any decent secure system woudln't allow to exec any software to the user beside of what's in their $PATH. Any decent system woudn't alllow the user to mount external storage at all, much less executing any software on it. For air-gapped systems, NNCP under a secure Unix (OpenBSD with home mounted as noexec, sysctl security tweaks enforcing rules, and such) it's godsend. Securelevel https://man.openbsd.org/securelevel.7 https://man.openbsd.org/securelevel.7 NNCP http://www.nncpgo.org/ http://www.nncpgo.org/ http://www.nncpgo.org/ http://www.nncpgo.org/