If you can be observed to use the combo (which you would have to be using regularly) somebody else could be pressing the combo or they could insert USB device that can generate the combo regularly.
I would also add that locking your laptop is not safe enough if you are serious about this. There are devices that can exfiltrate information from what I understand almost every operating system through USB.
If that is true, then it is a vulnerability. You should file bug reports.
For more safety: any plugged usb device should lock your screen so that a password is required before it can be used.
My point is that given how universal USB as long as a device can do both input and output it's going to be very hard to stop some exfiltration from being possible.
Do you really think a bug report should be filed on all OS's for allowing USB drives and keyboards to be plugged on a running system?
It is.
> Do you really think a bug report should be filed on all OS's for allowing USB drives and keyboards to be plugged on a running system?
Automatically trusting input devices is as bad as trusting user input. It's trivial to pass off a programmable USB keyboard as a mass storage device.
Convoluted way to put it I guess. For some reason was intuitive to me (proof of existence by example, more trivial example better).
Having access controls on USB-HID is just a local policy choice where most people would choose convenience over security.
But the comment I replied to seemed to suggest that the possibility of data exfiltration via USB is a bug in any OS.