Hacker News new | ask | show | jobs
by immibis 533 days ago
Yes, the card is a peripheral device to the phone - a hardware security key. It can't steal all your data for the same reason your Yubikey can't.

Answer delayed by hours due to HN rate limiting.

1 comments

Basically this.

And, hopefully your USB stack, or your phone's equivalent to SIM interface, doesn't have vulnerabilities that the small computer that is the SIM card could exploit.

Operating systems that center their efforts on protecting high risk users like Qubes dedicated a whole copy of Linux running in a Xen VM to interface with USB devices.

It'd be great if more information were available on how devices like Google's Pixel devices harden the interface for SIM cards.