> By default anything stuck into a USB port should be sandboxed Yes, suppose you... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

est on Nov 17, 2016 | parent | context | favorite | on: PoisonTap – Exploits locked computers over USB

> By default anything stuck into a USB port should be sandboxed

Yes, suppose you have a mac mini and you plug in USB keyboard, oops it's sandboxed and does not work.

blacksmith_tb on Nov 17, 2016 [–]

I think the idea is that if a second "keyboard" is plugged in while the machine is locked/asleep, it shouldn't work. Even for the scenario where you dump $BEVERAGE into your keyboard, forcing a hard reboot to be able to plug in another keyboard (and log back in) doesn't seem unreasonable.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact