[cryptome] Re: airgepped computer?--not for long maybe.

  • From: Libertas <libertas@xxxxxxxxxxx>
  • To: cryptome@xxxxxxxxxxxxx
  • Date: Thu, 04 Dec 2014 12:02:08 -0500

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

On 12/04/2014 11:18 AM, Andrew Hornback wrote:
> In an environment that requires an air-gap level of security and
> scrutiny, to allow removable media (especially USB drives)
> unfettered borderlines on the infinitely stupid.

It's not about allowing unfettered access, it's about using a USB on
the machine for any reason at any point. Its firmware could have been
infected in many ways, as it's likely been attached to another machine
which was networked. This is especially true considering that many
cheap laptops don't have CD drives these days, and that USBs are
commonly used as install drives.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=PC4j
-----END PGP SIGNATURE-----

Other related posts: