2 ms·
> secure channel, e.g. either by using a USB memory Aside: We need a "safely dumb" storage plug standard. Right now the flexibility of USB is a double-edged sw
by Terr_ 7mo ago
> secure channel, e.g. either by using a USB memory
Aside: We need a "safely dumb" storage plug standard. Right now the flexibility of USB is a double-edged sword, any USB device could potentially be malicious, waiting for the right moment to send keystrokes as a keyboard etc.
Or use the same plug for everything, but support a "passive storage only" that can be enforced by a special adapter or cable.
- akerl_ 7mo agoAssuming you’re not just soliciting random thumb drives from strangers… this doesn’t feel like an actual risk. When you’re getting things from strangers, use any of the myriad ways to send files over a network, where HTTP / your browser are the safe dumb plug.
- soupbowl 7mo agoThe place you buy the thumb drive is also a stranger that can't be trusted.
- akerl_ 7mo agoThis kind of paranoia isn't productive.
- Terr_ 7mo agoIt was productive enough for the NSA and FBI when they were intercepting equipment deliveries and installing backdoors in them. A USB stick that can secretly remember any file that looks like a key file or certificate would be very easy.