gpgAnon, draft 20150

[LisToFacTor]

On 5/29/20 4:51 PM, Stefan Claas - sac at 300baud.de wrote:
> how does Alice protects her Live-CD and USB stick, when she leaves home
> and Mallory gains access to them, so that for example the Live-CD can
> be exchanged?
Live-CD is a "public resource", available from multiple locations on
the 'net and off, simply discarded when not practical to protect.
Anybody can download, burn and give her a copy. On first use, checked
with:

sudo cat /dev/cdrom | shasum -

While noting on the CD is a secret, it is quite unlikely an adversary
can modify it without being detected.

> Does Alice use the USB-stick also with other mediums and if so how does
> she detect bad USB? 
USB hygiene is always a problem. Small devices and frequent hardware 
cycling on the trusted device with two USB ports is helpful:
dd if=/dev/sdb of=/dev/sdc bs=10M
(with subsequent cat ... | shasum - thrown in for good measure)