jtd wrote:
It is not the storage medium but the ability to autoload which is the problem. The other risks noted in this thread are common to all os's and / or the medium used for delivering content with a device driver being a specially dangerous case. Trusting anyone without an open review process is a strict no no. Further the act of verification has to be manual because an automated process has exactly the same set of vulnerabilities that the verification is trying to mitigate. Which defeats the purpose of automated driver loading. Complex methods have evolved for such verification certs being one such.
OK. So auto-loading USB drivers is a risk. Idea canceled. :)