News for hackers. Stuff that matters.

A comment on The Google plasma globe affair of 2012.

Re:The Google plasma globe affair of 2012 by kelnos on Monday October 10, 2022 @04:55PM (#33156287)
The author links to UKIP[0], a Linux daemon that they built to try to protect against these kinds of attacks. Did a quick "apt search" on my Debian machine, but nothing came up. Do any major distros package this, and do any install and enable it by default?

I guess it uses heuristics to determine if a device is evil, and that could cause a lot of false positives (which would create spurious bug reports and support cases for distro maintainers), so maybe having something like that installed and running by default isn't a great idea.

[0] https://github.com/google/ukip

[ Parent | on HN ]
Re:The Google plasma globe affair of 2012 by maxerickson on Monday October 10, 2022 @05:26PM (#33156565)
It calculates the times between the most recent 5 keystrokes and if they are too fast it carries out a configured action (logs the event or removes the device driver).
[ Parent | on HN ]