Re:Creating a bespoke data diode for air‑gapped networks
by XorNot on Tuesday January 06, 2026 @04:50PM
(#46519368)
If the digital side could be trusted we'd just set it to send only mode and be sure it'll behave - in reality we don't trust it.
The threat model where you use a data diode presumes an adversary might totally compromise the sending side - the guarantee you're trying to add is that whatever malware they push down the line has no ability to exfiltrate data regardless of how compromised it is.
The threat model where you use a data diode presumes an adversary might totally compromise the sending side - the guarantee you're trying to add is that whatever malware they push down the line has no ability to exfiltrate data regardless of how compromised it is.