Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

WiFi Hides Inside a USB Cable

hackaday.com

Post reply on HN
Print view View original

141–150 of 159 posts

Re: WiFi Hides Inside a USB Cable

#141

Post by dtornabene »

crankylinuxuser wrote: post #139
dtornabene wrote: post #96

Earlier quoted context omitted.

This is awesome and thanks for sharing it, do you know if the circle city con talks are going to be recorded? I'd love to see a walk through of this stuff

Ive never attended CircleCityCon before, but in my experience, hacker cons do record. The problem I find is the smaller cons end up hosting the videos on a private server. You could certainly ask them over twitter. In my experience they return questions in an hour or 2.

Hey, thanks for the response, I'll definitely follow up with them on twitter. And, seriously man, very cool stuff, very interested in digging in

Re: WiFi Hides Inside a USB Cable

#142

Post by megous »

Sholmesy wrote: post #129
leonroy wrote: post #126

Earlier quoted context omitted.

> I have seen in the UK solder used to physically block usb ports on laptops With devices moving to USB-C for data and charging I wonder how security companies are going to prevent physical access to USB ports...

Disable the USB controller?

It's necessary to negotiate the power requirements.

Re: WiFi Hides Inside a USB Cable

#143

Post by jon-wood »

deathanatos wrote: post #84
TylerE wrote: post #6

Earlier quoted context omitted.

How? I've never seen a device, certainly not a PC, that will just randomly connect to any router it sees without some sort of user input.

I think the device featured in the article "merely" appears as a keyboard to the victim machine. The attack can then transmit keystrokes over WiFi. (This is still sufficiently dangerous. Essentially, it's "open terminal, download evil.exe, execute evil.exe, minimize/close" and escalate from there. So, not something you want to happen.) That said, if you click the link next to BadUSB, they detail attacks whereby the d…

I’m sure there are some secure networks that require 802.1x authentication against a specific certificate authority, which would ensure devices only connect to a trusted network. That’s definitely an exception rather than the rule though - I’ve never worked anywhere that does anything more than limiting which device can connect to a particular switch port.

Re: WiFi Hides Inside a USB Cable

#144

Post by crankylinuxuser »

dtornabene wrote: post #141
crankylinuxuser wrote: post #139

Earlier quoted context omitted.

Ive never attended CircleCityCon before, but in my experience, hacker cons do record. The problem I find is the smaller cons end up hosting the videos on a private server. You could certainly ask them over twitter. In my experience they return questions in an hour or 2.

Hey, thanks for the response, I'll definitely follow up with them on twitter. And, seriously man, very cool stuff, very interested in digging in

Thank you!

Ideally, if you dont care about looks, all you need is a Raspberry Pi 3B+, keyboard/monitor/screen, Rtl-sdr, and a wire.

The wire is hooked up to GPIO 4 and used in conjunction with RPITX library.

The Rtlsdr allows receiving radio signals.

The only broken thing right now, is that changing GPU clock frequencies does "weird" things to the onboard wifi (unsurprising).

My next step will be making 2 scripts: 1 to install a SigInt tooling, and 2 is to update said tooling.

Re: WiFi Hides Inside a USB Cable

#145

Post by sametmax »

leonroy wrote: post #126
C1sc0cat wrote: post #106

Earlier quoted context omitted.

I have seen in the UK solder used to physically block usb ports on laptops - this was QinetiQ (the bit that remained as civilservants). Of course they equipped the laptop with a cd burner

> I have seen in the UK solder used to physically block usb ports on laptops With devices moving to USB-C for data and charging I wonder how security companies are going to prevent physical access to USB ports...

You'll remove the USB controller from the USB port on the laptop, then provide an adapter that has a USB controller, and plus it to the regular usb cable.

Re: WiFi Hides Inside a USB Cable

#149

Post by krapp »

dsabanin wrote: post #148
krapp wrote: post #130

Earlier quoted context omitted.

Jeff Bezos would probably think "info sec" is a unit of time.

He is Electrical Engineering and CS graduate from Princeton.

Having an engineering degree doesn't mean you necessarily know what 'infosec' is. Different domain and discipline.

Re: WiFi Hides Inside a USB Cable

#150

Post by crankylinuxuser »

michaelt wrote: post #112
walrus01 wrote: post #58

Earlier quoted context omitted.

In super secure locations like a SCIF, a TSCM (technical surveillance countermeasures) team comes through on a regular basis with highly sensitive, expensive portable spectrum analyzers, which would find this really quick.

If you were designing a modern bug, wouldn't you make it cache data and limit its transmission window to one second a week?

You're completely correct. You'd have to be watching that frequency continuously. Fortunately, there's another way...

Nonlinear junction detectors can find semiconductor things, be they powered on OR off. Long story short, you blanket an area with GHz rf, and then look at the harmonics of the freq you spray it with.

I can see how to create one with a 2.4GHz transmitter and a DSP. I know the prices Ive seen are in the thousands of $$$, in which it's not terribly complex. The hardware would probably cost around a few hundred, primarily cause DSPs are $$$$

https://en.wikipedia.org/wiki/Nonlinear_junction_detector

Post reply on HN