Timeline for Why do some FIDO security fobs use keyboard emulation mode?
Current License: CC BY-SA 4.0
6 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| May 7, 2022 at 20:40 | history | edited | John Deters | CC BY-SA 4.0 |
added 1137 characters in body
|
| Mar 20, 2022 at 20:16 | comment | added | IlliakaillI | this may be true for your local case, as I don't know what do you mean by 'we', but if we're talking about mainstream OSes, I think it should be configurable at the very beginning during OS installation. Users should be able to allow all unknown HID devices at their own risk, but defaults should be in favour of stronger security. | |
| Mar 20, 2022 at 19:08 | comment | added | John Deters | @IlliakaillI we tried disabling unknown HID devices until we found we had hundreds of remote users that required a wide variety of unique HID solutions for accessibility reasons. We couldn’t manage those remotely without adding big management problems, so we switched off that policy permanently. It hasn’t negatively affected our security at all; and it made jobs easier for those who require them. | |
| Mar 20, 2022 at 17:18 | comment | added | IlliakaillI | this makes sense. Regarding unknown HID devices: such device should have a unique ID, so it may be logical to assume that it should be refused when connected for the first time and only enabled after explicit approval. Too bad that this is not how most OSes treat external devices by default. | |
| Mar 19, 2022 at 15:57 | history | edited | John Deters | CC BY-SA 4.0 |
added 82 characters in body
|
| Mar 19, 2022 at 15:51 | history | answered | John Deters | CC BY-SA 4.0 |