Hacker News new | ask | show | jobs
by adrianm 4107 days ago
The article (especially the headline) implies that the new Macbook is somehow more at risk because of its reliance on one USB port. But if the root of the problem is USB more generally, wouldn't the only "secure" design preclude the inclusion of any USB ports whatsoever? My issue with the article is that by singling out the Macbook (due to its single port) they are not actually contributing any useful information back to the consumer about its potential security. If I'm missing something, I would appreciate clarification.
3 comments

If there is a USB port and a power port a super parinoid person could never use the USB port, or even fill it with glue. Not an option here.

This is also talking about how combining them also allows for the potential of charger based attacks, a charger is something that absolutely has to be plugged in at some point.

I guess the paranoid user can use an usb condom if so.
Time to make usb-c syncsyop http://syncstop.com/
A paranoid user wouldn't use a power port, either. At least not without whipping out a multimeter first.
The article also ignores that many of these USB issues are actually solvable in software (both uEFI and in the OS).

The only USB issue which REALLY isn't solvable is the fact that USB devices can simulate a USB hub and then attach fictional human interface devices (i.e. keyboards and mice) which they can then use to take over the computer and or otherwise cause problems.

Well you could build a system which requires explicitly allowing HIDs. The only HID for which it's a serious issue might be a keyboard, and for those the OS could segregate the alleged keyboard and require specific actions to allow it.
Well, the main difference is that even just to charge your laptop you'll need to plug in a USB plug - and people share laptop chargers a lot.

Agree that the article is largely a fuss over nothing, though.