Live data from Hacker News

FBI is warning people against using public phone-charging stations

schneier.com

151–160 of 328 posts

Re: FBI is warning people against using public phone-charging stations

#151

It really surprised me when this article blew up on Twitter as I thought it was common knowledge to never use public chargers and avoid untrusted usb anything after “bad usb”. It showed me how I live in a tech security bubble-a good reminder.

Getting a phone with a large enough battery (>5000mAh) is good opsec. I have a 10000 mAh battery in my phone, and I only need to charge about twice a week.

Re: FBI is warning people against using public phone-charging stations

#155
post #121
post #61

Earlier quoted context omitted.

It's not really. Supposed a nefarious group wants to get ahold of an executives phone who always flies out of LAX or goes to a certain mall and uses a public charger. It would be smart to zero day one of those and if a few extra people are exploited, maybe some bonus bank info.

This is typical hacker movie nonsense. In real life, if they want something from said executive they just kidnap him, threaten violence, and he gives them what they want instantly. Or just knock him out cold from behind, take his shit, and crack into it themselves.

There is way more risk involved in kidnapping someone, not to mention the fact that you’ve just given away the fact that you’re surveilling them.

Re: FBI is warning people against using public phone-charging stations

#156

Earlier quoted context omitted.

Less serious than tampering with fixtures in a secure area at an American international airport?

Exactly, and you'll be on video. You can buy stamps from a vending machine with cash.

If, and that’s a big if, the victim was able to trace the infection back to a charging port, then have the time, resources, and capability to debug the chips.

That’s all assuming the bad port wouldn’t have been removed, and video might just show regular “maintenance.”

Yeah, it’s all above and beyond, but I think it’s in the realm of possibility for a high level target (see: stuxnet et al)

Re: FBI is warning people against using public phone-charging stations

#157

Earlier quoted context omitted.

It is almost impossible to drain my iPhone to 0 unless I am doing something really unhealthy, like staring at it for 10 hours. I take a charger with me on trips so I can charge over night, but otherwise.. it's literally not possible in my reasonable life to run my phone out of juice. Back when I used android, it was much more common that runaway apps would drain my phone in 2 hours. But now? Doing a anker battery wou…

Just go on a trip where you use your GPS a lot and take pictures with your phone and it will last half a day at best.

Why would GPS use more power? It’s only receiving.

Re: FBI is warning people against using public phone-charging stations

#160

I'm seeing a lot of hysteria in response to this random tweet by the Denver FBI's social media person. Do we know of a single real-world use of this hypothetical exploit? Do we know that iOS's (and presumably Android's) protection against untrusted device access isn't enough?

It just doesn't seem like a plausible hack when you take in all the circumstances that have to line up correctly: 1. The station has to be using USB Ports / Charging cables that are data enabled, not just cables that carry power 2. The hacker would need some way of injecting the malware into the charging station ports without being seen, I doubt many charging stations are internet connected so you would have to be at…

More practically, you visit a place that has public chargers, you study them and create a compromised clone, and then you swap out the real one. Like card skimmers.
Post reply on HN