Hacker News Reader

> secure channel, e.g. either by using a USB memory

Aside: We need a "safely dumb" storage plug standard. Right now the flexibility of USB is a double-edged sword, any USB device could potentially be malicious, waiting for the right moment to send keystrokes as a keyboard etc.

Or use the same plug for everything, but support a "passive storage only" that can be enforced by a special adapter or cable.

View on HN

Assuming you’re not just soliciting random thumb drives from strangers… this doesn’t feel like an actual risk.

When you’re getting things from strangers, use any of the myriad ways to send files over a network, where HTTP / your browser are the safe dumb plug.

The place you buy the thumb drive is also a stranger that can't be trusted.

This kind of paranoia isn't productive.

It was productive enough for the NSA and FBI when they were intercepting equipment deliveries and installing backdoors in them.

A USB stick that can secretly remember any file that looks like a key file or certificate would be very easy.

Reply on news.ycombinator.com