On Fri, Jan 03, 2020 at 09:40:51AM -0500, Thor Lancelot Simon wrote: > > - uscanner, which was brought up by other people for an unrelated reason. > > It was removed from FreeBSD in 2009, from OpenBSD in 2013, and disabled > > in NetBSD in 2016. It has been superseded by ugen+SANE. > > I would like to suggest that the use of "generic" USB/SCSI/etc. devices > that allow sending arbitrary commands from userland is one of the least > safe design patterns in modern operating systems. Not all security > issues are accidental - some work as designed, and I think this is one > such. > > So it's a bit of a shame to see uscanner or any other target-specific > driver go, with an inherently unsafe generic target driver as replacement, > though perhaps in this case it's necessary.
concur -- David A. Holland [email protected]
