> yes we've been aware of this problem for a year or so :-)
> I guess we need to get the filters done..
> We do of course use firewire for remote kernel debugging with great
> success so we
> need to be able to turn it off sometimes :-)
Anyway, Firewire isn't Ethernet. A rogue device connected to an SCSI
port (or an USB port) could sniff traffic sent to other devices, isn't
it? It's a matter of how closely-coupled do you consider the interface;
an Ethernet is more loosely coupled than a Firewire. You assume than an
Ethernet may carry dangerous traffic, but, do you assume the same for a
SCSI, a USB or a Firewire port, I mean, the kind of interface you use
for hard disks, etc?
BTW, provided that USB ports are connected in parallel... a rogue USB
device could sniff a user's keyboard activity or even generate rogue
keyboard activity, isn't it?
Borja.
_______________________________________________
freebsd-security@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-security
To unsubscribe, send any mail to "freebsd-security-unsubscribe@freebsd.org"