687 reputation
716
bio website
location Orbiting the Sun (More precisely: probably Prague)
age
visits member for 4 years, 4 months
seen yesterday

Rents brain for food.

Programmer by day, OpenStreetMap enthusiast by night, bicyclist in-between.


Oct
10
awarded  Benefactor
Oct
10
awarded  Scholar
Oct
10
accepted Only use Mass Storage devices on a selected USB port - how?
Oct
10
comment Only use Mass Storage devices on a selected USB port - how?
@FuzzyToothpaste: Thanks for the reminder.
Oct
7
awarded  Nice Question
Oct
7
comment Only use Mass Storage devices on a selected USB port - how?
@Whaaaaaat: I have gone through the usual checklist - password-protected BIOS, only allow boot from the internal CD-ROM (read-only by design, not physically accessible), minimal user rights, disable CAD and Magic SysRQ, etc.; none of that guarantees perfect security, but each of it helps.
Oct
7
revised Only use Mass Storage devices on a selected USB port - how?
this is not a magic security dust - just one layer of defense
Oct
7
comment Only use Mass Storage devices on a selected USB port - how?
@Whaaaaaat: I'm not looking for a 100% gold-plated solution: I'm fully aware that the only safe computer is switched off, in a block of concrete, at the bottom of Mariana Trench. A determined enough attacker can get through any defense; it doesn't follow that I should leave the system unsecured against a drive-by attack on LHF.
Oct
7
comment Only use Mass Storage devices on a selected USB port - how?
@Whaaaaaat: When I was testing this, the usb-storage driver got loaded right before the block device(s) were created; mounting them was not necessary.
Oct
6
revised Only use Mass Storage devices on a selected USB port - how?
added physical security considerations
Oct
6
comment Only use Mass Storage devices on a selected USB port - how?
@BrianZ: I'll see how well the bounty goes; I've already received several useful pointers here in the comments. I have indeed been choosing between here and SE for this question.
Oct
6
comment Only use Mass Storage devices on a selected USB port - how?
@alci: That looks promising, thank you! Will look into this.
Oct
6
comment Only use Mass Storage devices on a selected USB port - how?
@Whaaaaaat: As for physical access - I agree completely. The other ports are not physically accessible to the users, and disassembling the case (or the keyboard, in order to splice into the USB cable) should be suspicious enough to get the user evicted from the premises in short order.
Oct
6
comment Only use Mass Storage devices on a selected USB port - how?
@Xieerqi: That's an interesting document, thank you; unfortunately, that does not solve my problem: I don't really care how many storage devices are connected; all I want is "anything connected that does not identify as a storage device is ignored by the system."
Oct
6
revised Only use Mass Storage devices on a selected USB port - how?
clarification: I need to support the Mass Storage *class*, not a specific device
Oct
6
awarded  Student
Oct
6
awarded  Promoter
Oct
2
comment Only use Mass Storage devices on a selected USB port - how?
(I'm aware that some USB storage devices are internally a USB hub with the mass storage hanging off it, but I'm trying to build the minimal case first)
Oct
2
asked Only use Mass Storage devices on a selected USB port - how?
Aug
16
awarded  Yearling