3 ms·
...Assuming your input stack on your non-internet connected machine is uncompromisable. In practice, this is decidedly not the case. OCR is complex. Your attac
by TheLoneWolfling 12y ago
...Assuming your input stack on your non-internet connected machine is uncompromisable.
In practice, this is decidedly not the case. OCR is complex. Your attack surface is not exactly tiny.
- a1369209993 12y agoGood OCR is complex. "Here's a jpeg with 80 lines of 80 characters (from a set of 64 ascii characters chosen for maximum descernability); do your best and I'll run that through a ECC that cuts down to a 32KB chunk." is rather less so. Also, there's no reason your OCR program needs any permissions other than reading a single jpeg and writing a single text file.
- TheLoneWolfling 12y agoYou can make the same argument about a non-airgapped computer, though. I don't see any advantage of this over (say) it connected via a dead-simple serial connection.
- pgeorgi 12y agoFor computer <-> computer communication, you don't need to print in plain text. Print things as barcodes (or qr or whatever you fancy), then scan them over there - those are much easier and more reliable to parse.