Re: [gentoo-user] [OT] Time-lock USB stick

[Kevin Chadwick <ma1l1ists@yahoo.co.uk>]

> We discussed using a simple RC timer to cut power to the device after a
> certain amount of uptime, but if I pointed out that if we were spend the
> time going to that trouble, we may as well go whole-hog and add built-in
> encryption and make money off the thing.
> 
> I think the grab-data-and-eject solution is probably the best for our
> purposes.

What about wiping the key.

I would investigate if a hdparm reset negates that security.

A long shot that all systems especially likely small ones will have
floppies (though there may be a usb one) but using a floppy eject would
certainly be one way (ignoring any buffers) as it is 100% mechanical
on the enable direction.

However why not just use a usb with perms set to root. If an attacker
can get root which should be the biggest barrier and you are not worried
about physical access then even SELINUX/RBAC may not save you.


-- 
_______________________________________________________________________

'Write programs that do one thing and do it well. Write programs to work
together. Write programs to handle text streams, because that is a
universal interface'

(Doug McIlroy)
_______________________________________________________________________