Keylogging? Just how do you think it can read any keystrokes?
As for inserting keystrokes, that will be obvious if it enumerates as a keyboard.
You should turn down your paranoia a little more.
As for inserting keystrokes, that will be obvious if it enumerates as a keyboard.
You should turn down your paranoia a little more.
This is true, but this also doesn't need to happen at insertion time. An HID keyboard can show up, say, 3 hours after you plug it in.
I miss grsecurity's patch set so much. It had an option to defeat this (deny all USB device enumeration post-boot, i.e. after the kernel executes init).
While I can try and conjecture how those might work, that's not really in my lane.