“Dear citizens, please be wary of attacks on your devices designed to compromise your privacy and personal information. It would be unfortunate if we had competition in the game.”
FBI is warning people against using public phone-charging stations
101–110 of 328 posts
Re: FBI is warning people against using public phone-charging stations
#102Earlier quoted context omitted.
...leaving a literal paper trail of package location tracking? Mail fraud is considered serious. Why commit an extra crime?
Less serious than tampering with fixtures in a secure area at an American international airport?
You can buy stamps from a vending machine with cash.
Re: FBI is warning people against using public phone-charging stations
#103When I see this I wonder, is the FBI warning us about something the CIA or NSA are doing?
Re: FBI is warning people against using public phone-charging stations
#104This might be a big advantage for wireless charging. Although it can be slower than a USB charger, there is no risk that it will be doing something other than charging.
Or just replace them with electrical outlets. Why we are using high-risk systems in public infrastructures when low-tech, low-risk systems exist is beyond me.
Re: FBI is warning people against using public phone-charging stations
#105Or at least use a USB condom with voltage protection
I mean, if they fry the device I think that's going to both be an acceptable risk (annoying but not breached), and also likely to be detected rapidly -- "Shit my device is fucked, better tell airport staff"
It's not charging - but maybe it was just a problem with that port on your laptop. Better try the charger in every one of your laptop's USB-C ports, just in case....
Re: FBI is warning people against using public phone-charging stations
#106I'm curious, shouldn't the "charge only" mode, that's the default, when connecting usb stuff to Android phones, be enough to protect users? Is it really that difficult to implement a "don't read data pins, only charge" mode on a phone and not have vulnerabilities in it?
If you can connect your turned off phone to your computer and start a reset, then that’s never going to be enough. If you want data safety, you must skip the data pins. If you want current safety, you must skip public chargers.
Re: FBI is warning people against using public phone-charging stations
#107It really surprised me when this article blew up on Twitter as I thought it was common knowledge to never use public chargers and avoid untrusted usb anything after “bad usb”. It showed me how I live in a tech security bubble-a good reminder.
Perhaps here on HN. Most people will plug their smartphone into any accepting receptacle. trains, airplanes, NYC SmartLink, or ask the bartender if they can plug it in behind the bar.
I still carry a DIY Altoids charger that takes a 9V battery (pulled down to proper volts for iPhone). In a battery emergency, my phone is simply on life support and I don't have to look for outlets that might also include a zero-day.
Re: FBI is warning people against using public phone-charging stations
#108real usage per second, per minute, not theoretical
can the charging stations resume data transfer if i unplug and replug at random times ?
i dunno, when i want to dump gb of data from my phone, it takes hours ... so yeah maybe i should stay at a random charging station for hours to ensure all data transfered :D
Re: FBI is warning people against using public phone-charging stations
#109I'm curious, shouldn't the "charge only" mode, that's the default, when connecting usb stuff to Android phones, be enough to protect users? Is it really that difficult to implement a "don't read data pins, only charge" mode on a phone and not have vulnerabilities in it?
If you can connect your turned off phone to your computer and start a reset, then that’s never going to be enough. If you want data safety, you must skip the data pins. If you want current safety, you must skip public chargers.
Re: FBI is warning people against using public phone-charging stations
#110https://reincubate.com/support/how-to/pair-lock-supervise-ip...