启用更多的端口过滤功能_即将启用的Chrome操作系统功能可在设备锁定时保护USB端口...

Love The Way You Lie 2021-07-26 14:05 285阅读 0赞

![启用更多的端口过滤功能][b9a7a9b573a1a5b7e1ce079d15421b73.png]

启用更多的端口过滤功能

![9e38bdc686728aa03f5419ee31f7e3f9.png][]

Chromebooks are inherently secure machines—they’re essentially impervious to viruses and similar threats found on other machines. The one primary weakness is a physical one, but Google is making moves to fix that, too.

Chromebook本质上是安全的机器-它们基本上不受其他机器上发现的病毒和类似威胁的侵害。 一个主要的弱点是物理上的弱点，但是Google也在采取行动来解决这一问题。

There’s a malicious USB tool called a *Rubber Ducky* that emulates a keyboard and has the capability of injecting up to 1000 keystrokes per minute onto any machine which it’s inserted. As long as a would-be wrongdoer has physical access to your computer, all they need to do is insert the USB key and let it do the rest.

有一个名为*Rubber Ducky*的恶意USB工具，它可以模拟键盘，并且能够每分钟向插入的任何计算机上注入多达1000次击键。 只要不法行为者可以物理访问您的计算机，他们所需要做的就是插入USB密钥并让其完成其余工作。

Since this is a physical weakness, that means Chromebooks are just as susceptible the Rubber Ducky attacks as other machines. But Google is working on a new feature for Chrome OS called *USBGuard* that will eliminate this threat by blocking access to USB ports on locked Chromebooks.

由于这是物理上的弱点，这意味着Chromebook与其他机器一样容易受到Rubber Ducky攻击。 但是Google正在为Chrome操作系统开发一项名为*USBGuard*的新功能，该功能将通过阻止访问锁定的Chromebook上的USB端口来消除这种威胁。

While this is still a work in progress, it appears that the feature won’t simply block access to USB ports across the board, but instead keep ports that are currently in use alive. So, if you’re transferring files from a USB drive and the ‘book goes to sleep, the transfer will continue. Similarly, users will be able to whitelist specific devices—like mice and keyboards, for example—so they’re always available regardless of the Chromebook’s lock state.

尽管这项工作仍在进行中，但似乎该功能不会简单地阻止对整个USB端口的访问，而是可以使当前正在使用的端口保持活动状态。 因此，如果您正在从USB驱动器传输文件，而'book进入Hibernate状态，则传输将继续。 同样，用户将能够将特定设备(例如鼠标和键盘)列入白名单，因此无论Chromebook的锁定状态如何，它们始终可用。

The USBGuard flag is already available on the [Chrome OS Canary channel for those who live dangerously][] but should be available to more users on other channels in the coming weeks or months.

ChromeGuard [Canary频道已经为那些危险生活的人][Chrome OS Canary channel for those who live dangerously]提供了USBGuard标志[，][Chrome OS Canary channel for those who live dangerously]但在接下来的几周或几个月内，其他频道的更多用户应该可以使用USBGuard标志。

*[ChromeStory][] via [Engadget][]*

*[ChromeStory][]通过[Engadget][]*

> 翻译自: [https://www.howtogeek.com/fyi/upcoming-chrome-os-feature-secures-usb-ports-when-the-device-is-locked/][https_www.howtogeek.com_fyi_upcoming-chrome-os-feature-secures-usb-ports-when-the-device-is-locked]

启用更多的端口过滤功能

[b9a7a9b573a1a5b7e1ce079d15421b73.png]: /images/20210726/3ef7179c538a4187a57f436304a71544.png
[9e38bdc686728aa03f5419ee31f7e3f9.png]: /images/20210726/c6d759807cd34bfab73bbf61baebf878.png
[Chrome OS Canary channel for those who live dangerously]: https://www.howtogeek.com/308602/how-to-switch-to-or-leave-the-canary-channel-on-your-chromebook/
[ChromeStory]: https://www.chromestory.com/2018/12/usbguard-usb-bouncer-chromebook/
[Engadget]: https://www.engadget.com/2019/01/02/chrome-os-block-usb-port-locked-devices/
[https_www.howtogeek.com_fyi_upcoming-chrome-os-feature-secures-usb-ports-when-the-device-is-locked]: https://www.howtogeek.com/fyi/upcoming-chrome-os-feature-secures-usb-ports-when-the-device-is-locked/