[Touch-packages] [Bug 1393612] Re: Protect against BadUSB device

2014-11-17 Thread Seth Arnold
** Information type changed from Private Security to Public Security -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to systemd in Ubuntu. https://bugs.launchpad.net/bugs/1393612 Title: Protect against BadUSB device Status

[Touch-packages] [Bug 1393612] Re: Protect against BadUSB device

2014-11-17 Thread Seth Arnold
Sadly, the solution is not easy nor obvious. Ubuntu is used in a wide variety of different ways and many of them do not lend themselves well to just popping up a dialog box. Furthermore, the problem is not at all restricted to just devices that can be reprogrammed to act like keyboards. A fairly

[Touch-packages] [Bug 1393612] Re: Protect against BadUSB device

2014-11-17 Thread Launchpad Bug Tracker
Status changed to 'Confirmed' because the bug affects multiple users. ** Changed in: systemd (Ubuntu) Status: New = Confirmed -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to systemd in Ubuntu.

[Touch-packages] [Bug 1393612] Re: Protect against BadUSB device

2014-11-17 Thread Pierre van Male
@ Seth Arnold: Thanks for your comment. In the case of an USB device acting as a keyboard and for multi-seat machines or remote servers, the keyboard should simply not be activated (what for?). This security measure can also be an option available in Security Privacy. I agree that Ubuntu and

[Touch-packages] [Bug 1393612] Re: Protect against BadUSB device

2014-11-17 Thread Martin Pitt
Removing package for now, as it's not at all clear how to design this (at least udev is way too low in the stack to even potentially ask the user anything). I'm very sceptical of these approaches. Experience shows that popping up dialog boxes with security related questions à la are you sure that