-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 On 07/21/2017 04:05 PM, Patrik Hagara wrote: >> Qubes is still worth it anyway, and I can always copy files over >> to my other machine via USB stick when I need to print >> something.
This might be a pretty nice attack vector for the "other machine" to compromise your Qubes system. Say you buy (assumed clean) USB stick, connect it to your Qubes system (which is not using USB VM), format it and copy some documents to it... Then you plug the stick into your non-Qubes system and print the docs. That machine might be infected and in turn infect the USB stick. Now the next time you connect it to your Qubes system, it gets infected as well. Game over. Please note that this scenario is not at all far-fetched -- malware routinely spreads via removable media. Plus, it's the perfect way of bridging air-gaps (see eg. Stuxnet for a high-profile malware example). This might make you think really hard about the trade-offs between keyboard/mouse security (detailed in my previous e-mail) and not having an USB VM at all. Cheers, Patrik -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQIcBAEBCAAGBQJZcgytAAoJEFwecd8DH5rlduAQALFUikMKDoImmPYz/VA6j/v4 uSILCPfXbc7OY9GAjUK/In9RIBxJMGPvIEpvUHorHEkb1lcmKIRwQYl0BlIYuz6u +To8rtNMiToPqL336w+Kt9vVYSl5gZFtYOHbjxZ7boz6fGxh/C1ZwspPjeAE8Plz R9ieG5KI9V+Inqs2FoSxYoxjBBLpCpeoPZ/mpIQtQRtDpApCqgHJdeynvFGy9Lw2 AJIyIvzhX74uUARO0P3QjnvrZE7RoOag8STFr1ZvzEHXf0UIgEhWratQAONE8h/2 BoLYJIP68vUwoaV/M4ZigFVPErLHLH18O+Cl06xbsUh1a8E9sdAAZbAQWF4pyGbY Aaqqil4BoYQWpfVRZwz+Vp1MBHzm441neR0Jb+1PHCtPSRiN33QUWhvUBQnQp3K9 2JlwqXbmoyyAWk4mpc+wTPI15BeQvjED9LvIqwtWPa+t6RQNwrvXKeV7+YGtwaFm cysN9Jb17jIbcr7O3HafeuRGpyzaB/utB+GJvB+RYkMzwwYkbxZxSsJIhbG0N0UP XPCzVtA4lMerqZNUhTQyylR4Q9S9R+qdPevkWpDBNUxBt44887XNArI4nI6tmXuB y0phFp2pEFfbjmH5CrOJ4oms6PObjtwFgTcPNg1OxrjbMHaC21ctJ+kt1Ra0ZSvV 8jmxrVMuYq0cXIdWOs3s =e9G4 -----END PGP SIGNATURE----- -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/44350344-65f2-eff0-1d6d-307cea0344af%40gmail.com. For more options, visit https://groups.google.com/d/optout.
0x031F9AE5.asc
Description: application/pgp-keys
0x031F9AE5.asc.sig
Description: PGP signature
