how would you authenticate the USB stick that is allowed though?
Without some sort of authentication mechanism an attacked could clone the device id of an allowed device.
better than nothing though! :)
There's the USB Authentication Protocol where devices identify themselves through digital signatures. But i don't know whether each device has a unique ID or its one cert for the whole production series.
