3 ms·

Protection against most attacks: The first time I connect a device, the OS should show me what type it is (keyboard, mouse, etc.) and ask me if I want to use it

by kretor 12y ago

Protection against most attacks: The first time I connect a device, the OS should show me what type it is (keyboard, mouse, etc.) and ask me if I want to use it. Only at that time it gets activated.

mjg59 12y ago
How do you uniquely identify a device?
- rainforest 12y ago
  You could have the OS randomly generate a token and give it to the device and require it to repeat it each time it's plugged in. Devices without tokens or with unrecognised tokens would need user approval, those with the correct one would be trusted. That still doesn't solve the problem of deciding if a device should be trusted or not though.
  - mjg59 12y ago
    That would require modifications to the spec.
  - deckiedan 12y ago
    OK - so if I plug it into my computer, I'll get the same unique information that lets you identify it. Now I can plug my USB stick into your computer and pretend to be that device.