> >> Also, what about pcmcia/pccard/express card? > > > > Sorry, we still have not discussed what usability vs. security balance > > we want in this area. For the record, these are tracked there: > > https://tails.boum.org/todo/disable_expresscard__63__/ > > https://tails.boum.org/todo/disable_pcmcia__63__/ > > > > I'd still go for disabling those two unless there is actually a > compelling reason to enable them. If there is such a reason, I'd ask > that users assert it and that the assertion binds to a single device, > rather than all devices blindly. These bus attacks are simply too > powerful and too obscure for users to knowingly defend themselves.
Understood, but I have seen uses of Tails on laptops that had their motherboard ethernet connector broken supplied by a PCMCIA network card. It sounds like a reasonable expectation to me that it should "just work". A possible middle-ground could be to de-activate PCMCIA and ExpressCard on systems that don't have any PCMCIA or ExpressCard devices after running for 5 minutes. This is going to byte some users, but probably only the first time. -- Ague
pgpzQ0gVGbuBR.pgp
Description: PGP signature
_______________________________________________ tails-dev mailing list [email protected] https://mailman.boum.org/listinfo/tails-dev
