11–20 of 143 posts
"Hey, stranger! Here's my card. Plug it into your computer's USB slot." Cool project, but as a business card, making someone think they're about to install Stuxnet might not be the best first impression. Heh.
It doesn't fix the software side, but I wonder if projects like this are a reasonable solution to hardware-based trusting trust worries. The real hardware is unlikely to know what it's being used for, and Linux is running in a custom VM that's tiny enough to audit.
I would have never conceived of such a project.
"Hey, stranger! Here's my card. Plug it into your computer's USB slot." Cool project, but as a business card, making someone think they're about to install Stuxnet might not be the best first impression. Heh.
This is a COOL project: BADASS even. You’re not technically wrong, but the world advances much more via optimism than pessimism.
To the creator: Rock On Dude. So so so cool.
"Hey, stranger! Here's my card. Plug it into your computer's USB slot." Cool project, but as a business card, making someone think they're about to install Stuxnet might not be the best first impression. Heh.
Maybe make it an unshielded USB-A connector and don't implement pins 2 and 3, so there's only the 5v and ground pins.
"Hey, stranger! Here's my card. Plug it into your computer's USB slot." Cool project, but as a business card, making someone think they're about to install Stuxnet might not be the best first impression. Heh.
Disappointed seeing a negative comment at the top. This is a COOL project: BADASS even. You’re not technically wrong, but the world advances much more via optimism than pessimism. To the creator: Rock On Dude. So so so cool.
> the world advances much more via optimism than pessimism
I don't think that's a slogan infosec folks frequently adopt.
Past HN thread on a similar project that had a lot of discussion: https://news.ycombinator.com/item?id=21871026
Earlier quoted context omitted.
Disappointed seeing a negative comment at the top. This is a COOL project: BADASS even. You’re not technically wrong, but the world advances much more via optimism than pessimism. To the creator: Rock On Dude. So so so cool.
I agree it's cool; that's why I prefaced everything with "Cool project". > the world advances much more via optimism than pessimism I don't think that's a slogan infosec folks frequently adopt.
It doesn't fix the software side, but I wonder if projects like this are a reasonable solution to hardware-based trusting trust worries. The real hardware is unlikely to know what it's being used for, and Linux is running in a custom VM that's tiny enough to audit.
What, just based off of the custom-ness of the device? I think the endgame of this type of security-by-obscurity is like a randomized FPGA computer trying to fool a hypervisor in the same chip.