Comment on Ask HN: What stops a random USB device from rooting Windows?parentComments−blibble4yhow can anti-virus protect against it?it has no way of telling that that device isn't a logitech keyboard, and can't tell that it's not the user opening up elevated cmd.exe and accepting the prompt−ComradePhil4yFrom the linked article:Kaspersky Endpoint Security's technology will not authorize any HIDs unless the user inputs a code using a HID already authorized to do so.
Comments
how can anti-virus protect against it?
it has no way of telling that that device isn't a logitech keyboard, and can't tell that it's not the user opening up elevated cmd.exe and accepting the prompt
From the linked article: