I have actually been considering doing something like this on top of Guix; isolating services into their own containers with the native --container command & qemu/kvm for heavier stuff like browsers. Then there's the addition of support for xen and xen based guests that beg to be tinkered with; Qubes with Guix as the dom0 host seems like a very enticing proposition. Might try to mess around with it if and when time allows.
I did not ask how to defend against it, I asked what it is called. But you and I both know you're intentionally 'misunderstanding' that.
Ah, I see. That goldilocks threat model where you're concerned about people targeting you specifically in person by attaching malicious devices to your computer but just not quite concerned enough keep random people from having unmonitored access to your computer. Then (assuming your vendor built their UEFI securely, lmao) secure boot might help. And this is worth only being able to run microsoft approved software on a computer that requires hardware attestation with your ID via pluton to connect to the niggercattlenet. Champion. Really.
As with most things it depends. Independent chip in short USB extension they connected your keyboard through? It's ogre. USB device that pretends to be an input device? Well, stuff like that gets loaded automatically too so it's probably a gamble of how up-to-date/hardened your kernel is vs. their device. Virus just on a partition on a thumb drive? This isn't the 90's where your computer auto-mounts whatever partition and executes autorun.inf so probably not. I would say disabling auto-mount is good practice but isn't even close to a silver bullet.
Yep, agreed. Security is always an arms race no matter who you are or what OS you use. I'm not sure what kind of attack that would constitute? Guess you can call it a "hot plug" or something of that nature, especially if the tool used is an OMG cable or other malicious device posing as something normal.
If udev wasn't such a horribly-architected solution, you ought to be able to do all this without a third-party solution, as this literally sits in the same solution space. But no, another nonce syntax... Someone should rewrite udev to use a properly-architected declarative language like Prolog, then you could do this sort of thing trivially.
from searching online, automatic subtitles say that he's mentioned the word 'kiwi' three other videos, referring to Suse's KIWI and KIWI-next, tools to build containerized images.
Kenneth Reitz biggest problem (for himself) is that he has always been a narcissistic pretentious twat. "The only thing I really care about is user experience"as stated on his GitHub profile is an overt lie detectable by anyone with a passing familiarity with his shit, and it's no surprise that his website renders like shit on my machine:
usb keylogger dongle? firewire dma device? it's a whole class of crazy shit
it's more "people fucking with the software on your hard drive"
with a non-retarded implementation of secure boot, you can burn your own public key into a nigh-impossible-to-reset write-once non-volatile memory area, and run your own bootloader that you signed yourself
The problem is most of us are humans who interact with other humans. Can you really tell your mom she can't log into her email when she's at your house? Shit like that. And we're in a world where shit happens like chinks can put that shit right on CPUs that they sell to us.
generally you would trust your mom to not plant a rootkit on your machine
this specific defense is meant for a specific threat: you go to some conference or something with your company laptop, and somebody decides to get in your hotel room somehow and fuck with that laptop so they can get the potentially-valuable data inside (and if the company is smart, they use multiple layers of defense and try to keep important data off the laptop if possible, just in case)
Honestly over time I get less and less convinced that the NSA is super competent.
And it happens. I didn't deny that.
They don't have to be super competent. They just have to be competent against people like you and me, and you're a dude who rabbits on about how you have terabytes of gay porn. I mean wtf man.
I can, but maybe I'm an arsehole. I knowingly haven't let anyone else touch my computer for over 20 years, after I let the kids of a family friend play on it to distract them and came back to find they'd completely fucked it up. Genius kids, but a valuable lesson: nobody touches my stuff. Not even my wife.
I can relate.
Another reason to run Linux. No one even WANTS to touch it.
OUR