You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
At the moment, the PS/2 keyboard is disabled under the dasharo/heads. This force users to use unsafe usb-keyboard set up, thereby increasing a surface attack. msi_z690a_ddr4.config file, line 33: export CONFIG_USB_KEYBOARD=y. coreboot-msi_z690a_ddr4.config file, line 639: # CONFIG_DRIVERS_PS2_KEYBOARD is not set
Describe the solution you'd like
Please enable the PS/2 keyboard as it is most likely the case for dasharo/coreboot.
Where is the value to a user, and who might that user be?
For users under Qubes it will mitigate significant security risks coming from USB input devices.
Also some users enjoying gaming may have slightly faster a mouse/keyboard response because of 'polling' when USB-keyboard is used.
Describe alternatives you've considered
Alternative strategy is to develop a package and install it into dom0 (which is not best option) that would limit the input speed for hid/USB input devices. It will perhaps reduce but not mitigate the risk of badusb attacks.
Additional context
No response
The text was updated successfully, but these errors were encountered:
The problem you're addressing (if any)
At the moment, the PS/2 keyboard is disabled under the dasharo/heads. This force users to use unsafe usb-keyboard set up, thereby increasing a surface attack. msi_z690a_ddr4.config file, line 33: export CONFIG_USB_KEYBOARD=y. coreboot-msi_z690a_ddr4.config file, line 639: # CONFIG_DRIVERS_PS2_KEYBOARD is not set
Describe the solution you'd like
Please enable the PS/2 keyboard as it is most likely the case for dasharo/coreboot.
Where is the value to a user, and who might that user be?
Describe alternatives you've considered
Alternative strategy is to develop a package and install it into dom0 (which is not best option) that would limit the input speed for hid/USB input devices. It will perhaps reduce but not mitigate the risk of badusb attacks.
Additional context
No response
The text was updated successfully, but these errors were encountered: