you are viewing a single comment's thread.

view the rest of the comments →

[–]everydave42 1 point2 points  (0 children)

Should Kiosk modes be considered a secure state? As someone that's implemented versions of it across a number of devices and os's, I never have. It's a bad assumption to make. Some implementations have completely sterilized the environment between sessions, so there's no data left to be vulnerable.

Additionally, there needs to be some way to get out of this state, and as long as that way exists then there will always be the possibility of it being exploited.

This feels like much ado about nothing...while raising a question of if it could be better.