Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 06 Oct 2014 20:30:00 +0000
From:      "Poul-Henning Kamp" <phk@phk.freebsd.dk>
To:        "Julian H. Stacey" <jhs@berklix.com>
Cc:        freebsd-security@freebsd.org, freebsd-usb@freebsd.org
Subject:   Re: BadUSB - On Accessories that Turn Evil, by Karsten Nohl + Jakob Lell
Message-ID:  <66233.1412627400@critter.freebsd.dk>
In-Reply-To: <201410061956.s96Ju8S3089675@fire.js.berklix.net>
References:  <201410061956.s96Ju8S3089675@fire.js.berklix.net>

next in thread | previous in thread | raw e-mail | index | archive | help
--------
In message <201410061956.s96Ju8S3089675@fire.js.berklix.net>, "Julian H. S=
tacey
" writes:

>For FreeBSD,
>  I guess for serious security, every new device that is connected
>  & recognised by /sbin/devd should in future be personaly authorised
>  by a human !  One can no longer trust what reports itself to be
>  eg a keyboard to actually Be a keyboard, etc.

"no longer" ?

When you could you *ever* trust a USB device about anything ?

-- =

Poul-Henning Kamp       | UNIX since Zilog Zeus 3.20
phk@FreeBSD.ORG         | TCP/IP since RFC 956
FreeBSD committer       | BSD since 4.3-tahoe    =

Never attribute to malice what can adequately be explained by incompetence=
.



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?66233.1412627400>