[ef4]

Yeah, but I think this is a bit worse than that.

If a faulty ethernet driver lets you compromise a laptop just by plugging it into a malicious network, that's a legitimate vulnerability, not really a case of "well, they had physical access".

USB may be customarily treated as more trusted than ethernet, but there are clearly still scenarios where untrusted people may be able to send you USB messages.

[bigiain]

"Here, mind if I plug my video camera into your Firewire port to charge (and trawl through your ram and swapspace looking for any usernames and passwords)?"