buffalo on Nostr: Air gapping. do we really need it? Why is an animated QR code communication needed. ...
Air gapping. do we really need it?
Why is an animated QR code communication needed. Is this any better than communication with a UART? I do accept that USB and Ethernet are much more complicated and have larger attack surface. Using these interfaces would potentially allow exploits of bugs in the hardware or middleware.
But what about an isolated serial interface? Technically its air-gapped, but its still coupled in some way.
I first heard this discussed on citadel dispatch talk on VLS.tech. I think I agree with this. Animated QR does limit the surface. But UART communication is almost as good. You can audit the communications without much difficulty in both cases but neither are human auditable.
UART hardware is simple. The protocols are simple.
Air gapped hardware could also have USB support and have the air gapping done via isolation on the same board.
Animated QR codes are an isolation method. There are several isolation methods. You can use transformers for magnetic coupling. Capacitors for capacitive coupling. Opto isolation using LEDs and light sensors. You could send the data with air pressure, speaker + mic.
There is not much different between an opto-isolated UART and an animated QR code.
Why is an animated QR code communication needed. Is this any better than communication with a UART? I do accept that USB and Ethernet are much more complicated and have larger attack surface. Using these interfaces would potentially allow exploits of bugs in the hardware or middleware.
But what about an isolated serial interface? Technically its air-gapped, but its still coupled in some way.
I first heard this discussed on citadel dispatch talk on VLS.tech. I think I agree with this. Animated QR does limit the surface. But UART communication is almost as good. You can audit the communications without much difficulty in both cases but neither are human auditable.
UART hardware is simple. The protocols are simple.
Air gapped hardware could also have USB support and have the air gapping done via isolation on the same board.
Animated QR codes are an isolation method. There are several isolation methods. You can use transformers for magnetic coupling. Capacitors for capacitive coupling. Opto isolation using LEDs and light sensors. You could send the data with air pressure, speaker + mic.
There is not much different between an opto-isolated UART and an animated QR code.