3 ms·
This is fascinating! Let me understand one thing: The sheep dip station is network connected to the sealed computer? Doesn't that still pose a risk and violate
by makmanalp 13y ago
This is fascinating! Let me understand one thing: The sheep dip station is network connected to the sealed computer? Doesn't that still pose a risk and violate the principle? It seems you'd be better off checking at the dip station and then reimporting on the sealed computer.
Then again, I suppose in that case you could have malware that detects what system it's on and decides not to activate on the dip station :)
- pasbesoin 13y agoI think you misunderstood iuguy's description. > unconnected system I understood this to be a literal description. I presume that this sheep dip station is maintained and updated, from time to time. However, that would be done using controlled, vetted media. And, if something goes wrong there, it has to been in the nature of something that will cause the masking of problems existing on the written/finalized media that the sheep dip station is in turn vetting. (Unless it's something that can "un-finalize" the vetting media and further write to it.) Or is the sheep dip station periodically connected while it is itself maintained/updated? That I could see presenting problems. In any event, I read this to mean in particular that the sheep dip station is not networked with the air gapped system.