Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

O.mg Cable

shop.hak5.org

Post reply on HN
Print view View original

61–70 of 555 posts

Re: O.mg Cable

#61

Post by lrvick »

Eiriksmal wrote: post #3

Wow! Is the trick that we now have powerful microcomputers small enough to fit into a USB plug? That's pretty incredible technology. How many years ago did this become possible? My IT security training is dated, I am aware of the risks of plugging in a random USB key, but just a cable from a helpful "coworker"? Yikes.

There is already an Arm Cortex M0+ in the end of every USB type C cable for power negotiation.

It has a complex codebase and firmware update methods to migrate to new USB specs. Cheap cables don't even support signing so go to town tampering with stock cables if you are so inclined.

Also an Attiny85 can fit inside just about anything.

My favorite BadUSB hello world is using the Arduino HID library to make a Digispark toggle caps lock randomly with maybe 10 lines of code. Drives people nuts.

Re: O.mg Cable

#62

Post by lisper »

I'm not sure what is scarier, the existence of this cable, or the amount of Javascript that this site tries to run when you visit it. According to my NoScript plugin, it's loading Javascript from at least 17 different domains.

Re: O.mg Cable

#63

Post by upearly4 »

reilly3000 wrote: post #12

It was my firm belief that many of the angry mobs at vote counting offices around the 2020 elections were cover for planting these types of devices. That is very much out of the Roger Stone playbook. The lack of anomalies has shaken that belief… but I do hope that the existence of these types of devices is included in security training for future polling staff.

I vote (so to speak) for paper ballots and voter ID.

Of course in that case, Roger Stone's guy would have won handily.

Re: O.mg Cable

#64

Post by shapefrog »

You should use a data blocker when using an unknown USB cable to charge your phone. Occasionally described as a USB condom.

Simply a Male to Female USB adaptor with the data wires not passed through.

Re: O.mg Cable

#65

Post by shadilay »

shapefrog wrote: post #64

You should use a data blocker when using an unknown USB cable to charge your phone. Occasionally described as a USB condom. Simply a Male to Female USB adaptor with the data wires not passed through.

Is that USB-PD compatible?

Re: O.mg Cable

#66

Post by lijogdfljk »

dugmartin wrote: post #54
1-6 wrote: post #48

Earlier quoted context omitted.

Problem in San Francisco is, you'll get people sleeping in your car if you do that.

Depending on the height of your windows I would think sleeping would be the best thing other people could do to your car.

I'd fear the associated smell.

Re: O.mg Cable

#67

Post by moron4hire »

progman32 wrote: post #20

As an aside: somewhat ironic that a shop selling gear such as this has such a large 3rd-party javascript footprint. At least some of that js is required for the page to work, as I'm unable to see pictures of the device. I counted 25 3rd party domains in uMatrix. That's quite the attack surface.

How is that ironic? Seems more in-character. Selling a device to steal data, they also extract data from whomever is visiting the site.

Re: O.mg Cable

#70

Post by VenTatsu »

mmastrac wrote: post #13

Can you write custom code for this thing? I actually have some non-nefarious use cases...

The product pages mention custom payloads, in some of the images it looks like some variant of the DuckyScript used in some of the other hak5 products. It likely depends on if what you want to do is supported or if it would need changes to the firmware to accomplish.
Post reply on HN