Comment

Comment by ZoneZealot

EDR software on the laptop controls what is and isn't allowed. It'll be disallowing USB removable storage devices etc, while still allowing standard HID (keyboard, mouse).

They can even block all but allow-list certain vendors and models, but because USB is an unauthenticated standard - an attacker can easily spoof any vendor or model. So best not to rely on that and instead block all of certain types of USB device.

Discussion

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton