Poisontap security issue of NetworkManager?

[Claudius Heine <ch denx de>]

Hi!

While reading about the poisontap hack by Samy Kamkar
(https://samy.pl/poisontap/), I thought about ideas to prevent that.

I think the main issue is, that the network device is automatically
setup via dhcp by tools like NetworkManager & co.

So my question is: Is that more of a system configuration issue or can
NetworkManager itself do something to prevent this scenario (e.g. not
starting dhcpcd on new interfaces generally or only while system is locked)?

Thanks and have a nice day,
Claudius