search

Lvl4Sword / Killer

🔪 System tamper detector for USB, Bluetooth, AC, Battery, Disk Tray, and Ethernet.
https://pypi.org/project/killer/
GNU Affero General Public License v3.0
71 stars 11 forks source link

Deal with duplicate USB/Bluetooth devices #14

Closed Lvl4Sword closed 2 years ago

Lvl4Sword commented 6 years ago

Spoofing is an issue, how do we deal with this?

Lvl4Sword commented 5 years ago

Was thinking about this, and can't think of a way to approach devices that AREN'T plugged in. Having a connected whitelist seems like the best way of doing this. The connected whitelist would consist of devices that must be connected 100% of the time. If any of the device(s) are disconnected, or if any devices on the connected whitelist are added again ( Good chance it'd be through spoofing, as it would appear that two of the same devices are plugged in ) the commands the user set would run.

This is the best approach I can think of.

GhostofGoes commented 5 years ago

This is something we should definitely deal with at some point. However, I don't think it's a priority until most of the functionality is stable and working across the primary platforms (Linux and Windows).

Lvl4Sword commented 2 years ago

This is approached in the new branch, and isn't an issue there.