Re:Show HN: The SC4-HSM, a fully open USB hardware secure mo...
by lisper on Friday July 08, 2016 @12:30PM
(#12056727)
> ideally out of band using a hardware pinpad
Not "ideally". Critically. Without an out-of-band PIN the card is easy to compromise. And most cards don't have input devices.
And even with a secure PIN entry, without a display you can't actually know what transaction you are authorizing. So yes, the malware would have to "horn in" on a legitimate request. But if your machine is pwned that's not hard.
Not "ideally". Critically. Without an out-of-band PIN the card is easy to compromise. And most cards don't have input devices.
And even with a secure PIN entry, without a display you can't actually know what transaction you are authorizing. So yes, the malware would have to "horn in" on a legitimate request. But if your machine is pwned that's not hard.