Re: Malicious devices & vulnerabilties

[Florian Weimer <fw () deneb enyo de>]

* Xi Wang:

> I am wondering where to draw the line.  Should such device drivers
> be considered vulnerable or not?  Thanks.

I think they should be considered vulnerable.  Some applications need
some robustness to attacks even from the local console (e.g., student
computer rooms).

USB is also a popular transport in many air-gapped environments.