Re: Malicious devices & vulnerabilties

[Vasiliy Kulikov <segoon () openwall com>]

Hi,

On Sun, Jan 08, 2012 at 16:32 -0500, Xi Wang wrote:
> On Jan 8, 2012, at 3:19 PM, Eitan Adler wrote:
> > Computer monitors? Keyboards. Anything you could plug into the
> > computer without opening up the case.
>
> That makes sense, though it's a little bit strange to say "hey man
> plug in this fancy monitor" for an attack, compared to lending a
> usb stick. ;-)

As USB device could pretend being almost any external device and fake
its own device ID, sizes and popularity of the device shouldn't limit
the set of untrusted drivers.

Thanks,

--
Vasiliy Kulikov
http://www.openwall.com - bringing security into open computing environments