Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Fri, 8 Aug 2014 07:00:13 -0700
From: Greg KH <greg@...ah.com>
To: oss-security@...ts.openwall.com
Subject: Re: BadUSB discussion

On Fri, Aug 08, 2014 at 09:56:34AM -0400, Daniel Kahn Gillmor wrote:
> 
> For example, you could register keyboards by serial number with the
> system,

Most USB keyboards in the system do not have a unique serial number.
Heck, most USB devices in the system do not have a unique serial number,
the only USB device that is required to do so is a USB printer,
everything else is free to not have one at all, or have the same serial
number for all devices made of that type.

Never treat a USB serial number as "unique", except for a USB printer,
sorry.

greg k-h

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.