3 ms·
> What does the OS or network config matter if it's "airgapped"? Fundamentally, you're still moving data on and off the machine. The software implementing the
by niels_olson 12y ago
> What does the OS or network config matter if it's "airgapped"?
Fundamentally, you're still moving data on and off the machine. The software implementing the communications protocols can still be vulnerable. So the procedures for maintaining the airgap matter. Schneier has some good pointers on this.
> What do you consider an "airgapped machine"?
A machine that, once set up, never sees a network. At the limit, set up one machine, scan that disk image for viruses, then install it on a second identical machine.
- runjake 12y agoYes but why? What are your goals? What conclusion are you trying to arrive at? Is TEMPEST a concern? Is hardware that may break your airgap (bluetooth, any weird IPMI stuff, etc) a concern? A meaningful answer cannot be given if we don't know your goals, here.
- niels_olson 12y agoMostly academic curiosity, but being in the government, there's always an non-theoretical risk someone will decide to come after you.