...by physically removing a port (who would do that) or using the software?
Do you protect your USB port?
https://github.com/USBShield/USBShield
https://github.com/USBShield/USBShield
...by physically removing a port (who would do that) or using the software?
23 Comments
ParlimentOfDoom@piefed.zip · 63 pts · 161d
Yes. It's inside my house where no one else can get to it.
RodgeGrabTheCat@sh.itjust.works · 19 pts · 161d
I have the port set to "Charge only when locked". I never use public charging stations.
JustEnoughDucks@slrpnk.net · 8 pts · 160d
Sony, in their infinite wisdom, defaults full data without the ability to choose a default, you can only deny upon plugging it in and it will eventually revert back to full data anyway
Ferrous@lemmy.ml · 3 pts · 161d
This is the best strategy.
However, if you ever knew youd NEED to use public charging, check out USB condom adapters. They open circuit the data pins.
FreddiesLantern@leminal.space · 15 pts · 160d
Shouldn’t you rather protect your usb ports from Windows?
(Kidding,… or am I?)
yannic@lemmy.ca · 7 pts · 159d
Which Windows? My south-facing ones?
IratePirate@feddit.org · 1 pts · 159d
Yo, dawg! I heard you like Linux! So we removed all the windows from your car!
BCsven@lemmy.ca · 7 pts · 161d
The software locks out the auto discover and auto config of attached devices, unless they are in an allow list.
Same like some android phone models where you can turn off USB port to protect your phone from being infiltrated.
I did work at a place that filled the USB ports with HotGlue to stop workers loading movies on the computers on night shift
MonkderVierte@lemmy.zip · 3 pts · 160d
Lol, did it work?
BCsven@lemmy.ca · 4 pts · 160d
Yes because the keyboard and mouse were via the serial PS connectors, but the IT dudes could have just opened the case and unplugged the USB headers instead of permanently filling the slots with glue.
umbrella@lemmy.ml · 7 pts · 159d
DieserTypMatthias@lemmy.ml · 3 pts · 160d
GrapheneOS allows you to disable it. I just charge mine wirelessly, though if the charger supports MagSafe, then you'll need to buy a MagSafe case for your Pixel, since built-in magnets are waaay too weak.
NewNewAugustEast@lemmy.zip · 3 pts · 160d
Windows? Why bother.
ell1e@leminal.space · 1 pts · 160d
Is there a similar program for Linux?
SurpriseWaterfall@sopuli.xyz · 10 pts · 160d
Linux has USBGuard and is likely in your distro's repos. It operates the same way with having rules on which usb devices to allow
MonkderVierte@lemmy.zip · 8 pts · 160d
So, uh, a udev GUI?
utopiah@lemmy.ml · 1 pts · 159d
Be mindful that such a program would have to be safer than the situation without. A program on a public repository that isn't used by any distribution, isn't audited, hasn't a lot of comments (and thus eyes on its code) might be a disproportionate risk compared to the default settings of a popular open source distribution IMHO.
xvertigox@lemmy.world · 1 pts · 160d
hexagonwin@lemmy.today · 4 pts · 160d
the usb device is auto detected and activated, it's just asking you to mount if it happens to be a storage device
xvertigox@lemmy.world · 1 pts · 159d
ell1e@leminal.space · 1 pts · 159d
I think to be fully safe, you would have to get prompted for any type of USB device including a mouse and keyboard. At least I think that's the idea of USBGuard.
xvertigox@lemmy.world · 1 pts · 159d
vaionko@sopuli.xyz · 1 pts · 159d
No? I just don't plug random shit in my computer.
orphigle@lemmy.ml · 2 pts · 159d
What, if somebody else does while you're not looking?
vaionko@sopuli.xyz · 1 pts · 157d
I never leave my laptop unsupervised, I'm more concerned about it getting stolen than malicius USB devices. And if someone gets to my desktop while I'm not looking, I've got bigger problems.
Samsy@lemmy.ml · 0 pts · 161d
Sure, I've got my HPV vaccination.
ExcessShiv@lemmy.dbzer0.com · 3 pts · 160d
What would USB stand for in this? Under Sheets Buddy?