On Thu, 2 Jan 2014, Thomas Benjamin wrote:
Yes. They contain firmware that can potentially be flashed by the user and /
or an adversary depending on the model.
Be aware, of course, that even if you get a model that cannot be flashed by a
user, if you get it by mail the adversary can still modify or replace the
firmware before it before it gets to you. We know that the NSA does this.
so would you recomend a usb flash drive that allows the user to flash the
firmware ?
if so, what open firmware should be flashed upon it ?
and which models of usb flash drive can you suggest ?
On Thu, Jan 2, 2014 at 4:27 PM, gpxctawjc5oh <[email protected]> wrote:
do usb flash drives contain firmware ?
if so, can this be flashed either by the user or an adversary ?
--
-----BEGIN PGP PUBLIC KEY BLOCK-----
Version: GnuPG v1.4.10 (GNU/Linux)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=HvwX
-----END PGP PUBLIC KEY BLOCK-----
_______________________________________________
Tails-support mailing list
[email protected]
https://mailman.boum.org/listinfo/tails-support
--
Sincerely Yours, Thomas S. Benjamin
--
-----BEGIN PGP PUBLIC KEY BLOCK-----
Version: GnuPG v1.4.10 (GNU/Linux)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=xI8l
-----END PGP PUBLIC KEY BLOCK-----
_______________________________________________
Tails-support mailing list
[email protected]
https://mailman.boum.org/listinfo/tails-support