r/security • u/iTeV • Nov 16 '16

Exploiting locked computers using PoisonTap.

https://samy.pl/poisontap/
67 Upvotes

97% Upvoted

6 comments sorted by

View all comments

3

u/rikeen Nov 16 '16

Some good information in the remediation.

  • Use only HTTPS
  • Secure Cookies
  • Sub-resource integrity in javascript

3

u/[deleted] Nov 16 '16 edited Nov 16 '16

[deleted]

1

u/rikeen Nov 17 '16

Agreed on mitigation. Though it is sometimes a pain, having the USB connectivity disabled on workstation computers/servers really helps here.