Conversation

Jarkko Sakkinen

Edited 7 days ago
USB is interesting in the way that identifying USB devices is a non-existent feature.

E.g., a librarian for USB mass storage would have to base identifying to filesystem labels, and obviously user would have to have a process for labeling for that to actually work.

And if a malicious stick is attached, as long as it provides sane description of itself (i.e. naming a legit device, vendor, class etc.), computer can't tell the difference.
1
0
0

@jarkko Isn't that the same with any media, like SD cards?

1
0
0
@aakoskin It is but I somehow "knowingly" realized this while working on with USB stack as such a huge limitation :-) so yeah, this is stating the obvious if you want to put it that way.
1
0
0
@aakoskin I.e. I autolabeled USB topology in real-time (through uevents and udev database) and had a way to set labels and yeah ... not very smart :-)
0
0
0