I don&#x27;t know too much about badusb, but I think some mitigation is possible.<p>1. Use an USB key that doesn&#x27;t have an updateable firmware.
2. Configure the laptop to only accept a single USB mass storage device on a dedicated port. No keyboard, no mouse. I should be possible with udev rules.