Hacker News new | past | comments | ask | show | jobs | submit | more mrkoot's comments login

In March 2015, Karsten Nohl is quoted wrt type C in the context of BadUSB:

'"The additional openness and flexibility of USB Type-C comes with more attack surface," says Karsten Nohl, one of the researchers who first discovered BadUSB. "No solution for BadUSB is in sight even with this new standard."'

(source: http://www.theverge.com/2015/3/16/8226193/new-apple-macbook-... )

Any new developments or new information available on that, other than, say, iOS prompting the user on 'Trust This Computer'?


I'm certainly not excited about the idea of all the random USB devices I plug into my machine having a PCIe lane with DMA capabilities available to it. Random vendor-provided USB mass storage sticks being able to read all the system memory? What could possibly go wrong?

In theory, IOMMU can mitigate these risks. In practice, barely any OS actually enables those protections, and AFAIK the CPU manufacturers (at least Intel) are still using availability of IOMMU as a differentiating factor for high-end CPUs.


It works - thx!


Join us for AI Startup School this June 16-17 in San Francisco!

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: