BusKill – A USB kill cord for laptops • Hacker News Board

Re: BusKill – A USB kill cord for laptops

#111

Post by fluidcruft » Wed, Dec 15, 2021, 2:20 PM UTC

throwaway12232 wrote: post #13

_flux wrote: post #8

Earlier quoted context omitted.

I can grant expensive (though I don't know for how cheap I could make such a sellable project with free worldwide shipping, while also making profit), but what is comically impractical about this? It's not like the default functionality is to nuke the device from the orbit on disconnect. You could make one for yourself cheaper, though, if you have the know-how. Though a basic face detection-based screen lock could be…

Only the cable by itself cost $59.00. It's the same USB magnetic cable that you can buy in many shops for $2. > but what is comically impractical about this? That you have to carry such contraption around and find a place to tie it to. If you have to spend more than $30 for a custom device you can detect if a laptop is being moved away from a table in many better ways.

Oh, so you could hopefully substitute a suitable USB C cable? (Assuming they exist)

Re: BusKill – A USB kill cord for laptops

#112

Post by szszrk » Wed, Dec 15, 2021, 2:20 PM UTC

Hizonner wrote: post #11

That can trivially be done in software using any USB device at all. In fact, Tails has done it forever, and I bet other things have too. Total ripoff.

Also magnetic usb cables are quite easily available now. You could use any tiny usb device and add magnetic feature to it for around $10 or so.

Re: BusKill – A USB kill cord for laptops

#113

Post by gruez » Wed, Dec 15, 2021, 2:20 PM UTC

salex89 wrote: post #51

Or, maybe just add back the Kensington Security Slot and attach the laptop to yourself/desk with a strong wire and not have your laptop yanked in the first place. I understand the first part of my idea is dead in the water, we hardly get additional ports, let alone a slot hardly anyone will use. But I would like to see a way to retrofit a KSS on a laptop.

>Or, maybe just add back the Kensington Security Slot and attach the laptop to yourself/desk with a strong wire and not have your laptop yanked in the first place.

They could still yank you. It would pretty hard for you to execute the self destruct sequence after the undercover fbi agent knocked you over from your chair.

Re: BusKill – A USB kill cord for laptops

#114

Post by martin_a » Wed, Dec 15, 2021, 2:21 PM UTC

FDSGSG wrote: post #83

martin_a wrote: post #81

Earlier quoted context omitted.

You seem to misunderstand what a postal address is. The provided information on this website is not enough to do legally binding business (at least in some parts of Europe, it's not only Germany).

In Germany you can enter into a verbal contract without any exchange of personal details. Why would a website be treated differently? I'm curious. As far as I understand German law is very flexible about what constitutes a valid legally binding contract.

Chapter 2 and 3 of the "BGB" contain several paragraphs which define legal rights and obligations for doing business via the internet or telephone.

§312f for example defines that customers must receive "a copy of a contractual document signed by the contracting parties in such a way that their identity is identifiable" (translated via DeepL).

A simple mail address is not an identity in German law, especially not when doing business with B2C as you always have a 14 day period to cancel your order (except for downloads and various, special products).

edit: If you want to cancel, you must be able to do so via (offline) mail, too.

Re: BusKill – A USB kill cord for laptops

#115

Post by lmilcin » Wed, Dec 15, 2021, 2:21 PM UTC

zionic wrote: post #106

lmilcin wrote: post #90

Earlier quoted context omitted.

Yeah, I have that on my servers in case somebody tries to hack them. There is a secret to logging to my machines and if you miss it the machine self destructs in a reversible way. Can't give more information but it is pretty easy to boot it again. One thing of note here, don't put LUKS header on any kind of flash (like SSD) or SMR HDD.

>One thing of note here, don't put LUKS header on any kind of flash (like SSD) or SMR HDD. Why not?

SSDs and drive-managed SMR HDDs do not immediately delete the data.

If the system is interrupted after data is deleted there is a good chance you can still get it back.

On a normal HDD you still have to wipe the data (ie. physically overwrite it half a dozen times). But this is not possible to execute reliably on SSD or drive-managed SMR HDD.

Re: BusKill – A USB kill cord for laptops

#116

Post by Jerrrry » Wed, Dec 15, 2021, 2:24 PM UTC

zionic wrote: post #105

Jerrrry wrote: post #75

Earlier quoted context omitted.

>This device would have kept Ross Ulbricht out of jail. This device would had made a difference in the initial library-swipe confrontation, but would had definitely not kept Ross out of jail by any means (even that day)

Oh he certainly would have been arrested (jail), but he would have avoided prison (conviction).

He would of avoided jail (that day, the agent would have noticed the bump-kill-switch and averted recon)

He would had always of went to prison, even if they didn't get his HDD unencrypted. He used his personal email to promote his Mycology website, had the Obama administration to contend with, and was the first to sail westward.

Free Ross (The Department of Parks and Recreation)

Re: BusKill – A USB kill cord for laptops

#117

Post by martin_a » Wed, Dec 15, 2021, 2:25 PM UTC

paulcole wrote: post #95

martin_a wrote: post #57

Earlier quoted context omitted.

It's not about viewing/trying to track me, but we are talking about somebody trying to sell me something. Would you feel fine paying around 100 bucks to... well... whom? Just a website with no contact information, no names, adresses, business registration, whatever? As far as I can see, this could very likely be a scam of some sort, because anybody who's into doing "real", honest, business would be fine with giving h…

> Would you feel fine paying around 100 bucks to... well... whom? I’d feel fine deciding if I feel fine. That’s also why I have a credit card. I can get scammed and not be out $100.

Ok, so you get the item and it explodes in your face. Whom do you sue?

Re: BusKill – A USB kill cord for laptops

#118

Post by Anunayj » Wed, Dec 15, 2021, 2:26 PM UTC

zionic wrote: post #106

lmilcin wrote: post #90

Earlier quoted context omitted.

Yeah, I have that on my servers in case somebody tries to hack them. There is a secret to logging to my machines and if you miss it the machine self destructs in a reversible way. Can't give more information but it is pretty easy to boot it again. One thing of note here, don't put LUKS header on any kind of flash (like SSD) or SMR HDD.

>One thing of note here, don't put LUKS header on any kind of flash (like SSD) or SMR HDD. Why not?

I'm guessing it is because it's harder to securely wipe SSD/flash drives [0]. Anyway I'm no expert on these topics.

[0]: https://wiki.archlinux.org/title/Securely_wipe_disk#Flash_me...

Re: BusKill – A USB kill cord for laptops

#119

Post by marcodiego » Wed, Dec 15, 2021, 2:28 PM UTC

This could have saved the creator of silk route. Not that I sympathize with crime, but he was unfairly accused of crimes he didn't committed like paying hitmen to kill enemies. Also, the way to operation was setup to get his laptop forcefully from him was, at the least, disrespectful. If FBI was so sure he committed any crime, they could have legally got a search warrant.

Re: BusKill – A USB kill cord for laptops

#120

Post by FDSGSG » Wed, Dec 15, 2021, 2:29 PM UTC

martin_a wrote: post #114

FDSGSG wrote: post #83

Earlier quoted context omitted.

In Germany you can enter into a verbal contract without any exchange of personal details. Why would a website be treated differently? I'm curious. As far as I understand German law is very flexible about what constitutes a valid legally binding contract.

Chapter 2 and 3 of the "BGB" contain several paragraphs which define legal rights and obligations for doing business via the internet or telephone. §312f for example defines that customers must receive "a copy of a contractual document signed by the contracting parties in such a way that their identity is identifiable" (translated via DeepL). A simple mail address is not an identity in German law, especially not when…

Sure, they're not following the rules. Why would that affect the validity of your contract with them if you purchase good from them? Why would this contract not bind the seller?