BusKill – A USB kill cord for laptops

Re:BusKill – A USB kill cord for laptops by tjader on Wednesday December 15, 2021 @10:58AM (#29567754)

Of course not, but then you're saying USB is a security flaw.

My point is that given how universal USB as long as a device can do both input and output it's going to be very hard to stop some exfiltration from being possible.

Do you really think a bug report should be filed on all OS's for allowing USB drives and keyboards to be plugged on a running system?

[ Parent | on HN ]

Re:BusKill – A USB kill cord for laptops by matheusmoreira on Wednesday December 15, 2021 @01:37PM (#29569890)

> you're saying USB is a security flaw

It is.

> Do you really think a bug report should be filed on all OS's for allowing USB drives and keyboards to be plugged on a running system?

Automatically trusting input devices is as bad as trusting user input. It's trivial to pass off a programmable USB keyboard as a mass storage device.

[ Parent | on HN ]

Re:BusKill – A USB kill cord for laptops by DarylZero on Wednesday December 15, 2021 @01:43PM (#29569981)

I was saying that the existence of the non-implementation of USB proves the possibility of access controls on USB.

Convoluted way to put it I guess. For some reason was intuitive to me (proof of existence by example, more trivial example better).

Having access controls on USB-HID is just a local policy choice where most people would choose convenience over security.

[ Parent | on HN ]

Re:BusKill – A USB kill cord for laptops by tjader on Wednesday December 15, 2021 @01:49PM (#29570063)

I agree, and it makes sense for some security oriented OS.

But the comment I replied to seemed to suggest that the possibility of data exfiltration via USB is a bug in any OS.

[ Parent | on HN ]