News for hackers. Stuff that matters.

A comment on No one, not even the Secret Service, should randomly plug in a strange USB stick. Parent comment

Re:No one, not even the Secret Service, should randomly plug... by hopler on Monday April 08, 2019 @10:34PM (#19611242)
You only need to authenticate a device once, when you first acquire it, or after it is tainted due to loss of physical control. This is how Bluetooth works today.
[ Parent | on HN ]
Re:No one, not even the Secret Service, should randomly plug... by jolmg on Monday April 08, 2019 @11:32PM (#19611537)
Maybe I'm wrong, but there's currently no sort of authentication protocol for devices in USB, right? I (and I think jimrandomh too) was thinking of USB as-is. Something that OSes can do right now without having to wait for whoever controls the USB spec. As it is, how can an OS know that the mouse it sees on waking up is the same mouse that was connected before it slept or powered off? I don't think there's any sort of cryptographic authentication specified for USB devices.
[ Parent | on HN ]