Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Yes, physical access is game-over.

However, what if the malicious device is actually a compromised but popular vendor who ships malicious firmware? That wouldn't be a stretch.

Resetting devices and fixing drivers isn't a huge win, but it's still an improvement. Like ASLR doesn't actively prevent buffer overflows - it just makes attacks more difficult.



Consider applying for YC's Fall 2025 batch! Applications are open till Aug 4

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: