5 ms·
Devil's Advocate: What if they swap Scheier's USB key (or drive) with one that will exploit the USB stack on his offline computer (disabling 'auto-mount' won't
by pyre 13y ago
Devil's Advocate:
What if they swap Scheier's USB key (or drive) with one that will exploit the USB stack on his offline computer (disabling 'auto-mount' won't help you here)?
Yes, it's a physical access attack, but physical access to his person might be easier to achieve (while remaining unnoticed) than access to the offline computer.
- chris_mahan 13y agoAnd he's probably high enough in the list of NSA "persons of interest" to warrant a field agent's time.
- MichaelGG 13y agoI think the idea is to use simple physical media, like CDROM, where hiding a malicious payload is far more difficult since there's no embedded electronics on a disc. If that's too cumbersome, one could always implement a simple teletype-like system with a low bitrate. Like an automatic machine that can physically press keys on a keyboard. Then remove every key except letters, numbers, shift and tab. You could use a similar system or OCR to get data off the gapped machine.
- pyre 13y agoOne could, but IIRC Schneier has mentioned using a USB drive (though it could all be a clever ruse to throw off the NSA ;-).