Re:No one, not even the Secret Service, should randomly plug...
by hopler on Monday April 08, 2019 @10:22PM
(#19611166)
The only reason your laptop is trusted is because you trust the person who gave you the laptop. The same threat model applies to the first keyboard you get for your desktop. Neither laptop/desktop nor keyboard is inherently more trustworthy.
[ Parent
| on HN ]
Re:No one, not even the Secret Service, should randomly plug...
by Reelin on Monday April 08, 2019 @10:59PM
(#19611371)
I'm not worried about the keyboard I purchased or my hardware vendor. Well I am, but far less so than the prospect of a foreign USB device being plugged in and managing to execute malicious code. Think someone quickly inserting a device as they walk by, secretly swapping out one of my peripherals while I'm not around, or similar. Authorization on first use is more than sufficient to mitigate this type of attack, and if you add end-to-end encryption you can also prevent USB keyloggers.