7 ms·
If you are paranoid about something like this happening, just use https://www.qubes-os.org/ https://www.qubes-os.org/. all usb devices are jailed in a non-netwo
by waldfee 6y ago
If you are paranoid about something like this happening, just use https://www.qubes-os.org/ https://www.qubes-os.org/. all usb devices are jailed in a non-networked vm by default.
In general, if what you do warrants that level of paranoia, qubes will help you massively.
Micah Lee held a great overview talk at HOPE 2018: https://www.youtube.com/watch?v=f4U8YbXKwog https://www.youtube.com/watch?v=f4U8YbXKwog
- kawsper 6y agoHow does that work with input devices like keyboard and mouse?
- waldfee 6y agogenerally it is advised to use ps2 input (like most laptop's integrated keyboard and touchpad). details on using usb keyboard and mouse here: https://www.qubes-os.org/doc/usb-qubes/ https://www.qubes-os.org/doc/usb-qubes/
- czechdeveloper 6y agoI don't think it solves same problem.
- waldfee 6y agoit does not solve the same problem, correct. it's still a great tool if your threat model warrants it.
- gjs278 6y agogreat but it has nothing to do with disabling a physical server
- portpecos 6y agoCan you give an example of a threat model that would warrant it?
- smogcutter 6y agoYou’re a journalist. Source gives you a usb drive full of documents. Source is in reality hostile/compromised, so is the usb drive.