Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

O.mg Cable

shop.hak5.org

Post reply on HN
Print view View original

151–160 of 555 posts

Re: O.mg Cable

#151

Post by rsync »

etskinner wrote: post #101
pdimitar wrote: post #90

Can somebody recommend good charging cables with the data lanes disabled? Would put my mind at ease when I'm traveling.

You could do that, but then you'd need to forgo USB Power Delivery, Qualcomm quick charging, etc. One thing I've heard other comments mention here is a USB condom (USB data blocker). It's just a male to female adapter with only the power lines patched through, not data lines.

I can vouch for usb condoms.

Not only do they allow safe use of Arbitrary power ports but they also allow me to charge my phone from my laptop without syncing for updating things…

Re: O.mg Cable

#152

Post by Ajedi32 »

lrvick wrote: post #139
hughrr wrote: post #79

Earlier quoted context omitted.

We just broke the locks on the cages with a screwdriver. Locks only keep honest people honest.

I don't expect good locks to keep people out. I expect good locks to be tamper evident so I know I can't trust my system.

Unfortunately, there aren't really all that many "good locks" on the market. The Lock Picking Lawyer on YouTube[1] has pretty much destroyed my faith in the modern lockmaking industry.

[1]: https://www.youtube.com/c/lockpickinglawyer/videos

Re: O.mg Cable

#153

Post by __alexs »

deelowe wrote: post #111
chooseaname wrote: post #23

Earlier quoted context omitted.

You may be underestimating how significant $20-$30 is to some people. Edit: wording.

Are you suggesting a stolen cable brings the same sort of premium as a new one from Apple? Regardless, I'm not suggesting this at all. My point is that there are likely ways to get something worth so little without risking significant jail time.

You may be surprised to learn that the economics of small scale theft are pretty weird. https://priceonomics.com/why-thieves-steal-soap/

Re: O.mg Cable

#154

Post by lrvick »

pa7ch wrote: post #146
lrvick wrote: post #44

See also: C-to-C charger cables with Bluetooth remote activated dual payloads: https://sneaktechnology.com/product/usbninja-custom-type-c-t... I easily modified mine to mimmic Apple Keyboard USB IDs to avoid notifications. Works great! Cellular GPS tracking car charger: https://www.amazon.com/Charger-Locator-Professional-Listenin... Cellular GPS tracking USB charger cable: https://www.ebay.com/itm/223990414124 I have…

Curious if chromeOS does anything special here to mitigate usb attacks.

They do nothing.

Re: O.mg Cable

#155

Post by brk »

Workaccount2 wrote: post #147
mikeatlas wrote: post #136

Earlier quoted context omitted.

https://blues.io/

What service are they using that gives 10 yrs of connectivity for a flat price?

Probably "VC Cash".

I've got a couple of the units and can say they are working well and very easy to interface with.

Re: O.mg Cable

#156

Post by xyzal »

einpoklum wrote: post #132
thinkingemote wrote: post #40

Earlier quoted context omitted.

The real answer? Because these people are just like us, geeks, nerds, techies, early adopters. They are just the same people we live and work with. The film Enemy of the State (1998) was science fiction except with the parts where the techy operators were just normal nerds like us. That what was most scary part of the film not the (at the time fantastic) surveillance.

They are really quite unlike us. And our sets of norms is, shall we say, somewhat different to theirs.

You imply hacking human minds to be more acceptable than hacking computers?

Re: O.mg Cable

#157

Post by fredley »

jmartrican wrote: post #89

We can't even trust our own cables. How do we combat this type of attack vector?

Buy your own cables, and as you unwrap them, secure a tamper seal around them in some way. Commit the tamper seal codes to memory. Only then can you be absolutely sure.

Re: O.mg Cable

#158

Post by callesgg »

giarc wrote: post #135
spiderfarmer wrote: post #124

Earlier quoted context omitted.

Doesn’t work as it notifies the person traveling with it.

I thought it only chirped if the owner clicked that option in "Find My" app.

Its not that it is chirps it is that any iPhone beeing tracked by a airtag for a extended amount of time will inform its owner that it is being tracked.

Re: O.mg Cable

#160

Post by lrvick »

lostmsu wrote: post #119
lrvick wrote: post #44

See also: C-to-C charger cables with Bluetooth remote activated dual payloads: https://sneaktechnology.com/product/usbninja-custom-type-c-t... I easily modified mine to mimmic Apple Keyboard USB IDs to avoid notifications. Works great! Cellular GPS tracking car charger: https://www.amazon.com/Charger-Locator-Professional-Listenin... Cellular GPS tracking USB charger cable: https://www.ebay.com/itm/223990414124 I have…

Am I missing something? The worst thing the cable can do is send HID commands, and snoop on traffic between your USB-connectable device and PC?

They could do lots of things:

- Keylogging

- Manipulate USB Power negotiation to cook your hardware

- Sniff traffic from other USB devices on the same internal hub.

- Log your location

- Log screen lock/unlock times/habits via voltage draw and permitted device type enumeration

- Install malware via keyboard emulation

- Sound exfiltration by emulating USB speakers

- Screenshot by emulating a USB/thunderbolt external monitor

- Mouse movement/click injection to prevent screen locking

- Exfiltrate data to hidden internal flash memory

Post reply on HN