Hacker News Reader

It amazes me they didn't use some kind of KVM on these laptops instead of software, most company laptops have a ton of bossware on them monitoring applications and such

View on HN

A KVM is more likely to trigger a SOC response than leveraging built-in RDP or using Zoom remote desktop.

Surely a tuned KVM could impersonate a standard input hardware vendor (eg Logitech)?

It would both be very difficult and anomalous enough to be caught by a company's SOC.

On the other hand, a long running Zoom session can remain undetected due to it's normality.

People emulate mice and keyboards from raspberry pis. I do not see why a KVM could not do the same. Or pretend it is a usbc docking station. Generic input devices do not have security keys.

Reply on news.ycombinator.com