tech-security archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

Re: How trustworthy is that I/O device?



On Nov 4, 2013, at 2:34 PM, Erik Fair <fair%netbsd.org@localhost> wrote:

> All OSes have a problem with USB and potentially all other hot-plug I/O 
> busses: can you trust the device that was just plugged into the bus? How much 
> I/O do you permit to it before explicit authorization of some kind?

I've always wondered why we "trust" file systems and panic they aren't
what we expect.  We don't do that for networking.  If seems if we encounter
an inconsistency, we mark the f/s as read-only and either return an error
or complete the action if possible.



Home | Main Index | Thread Index | Old Index