Live data from Hacker News

O.mg Cable

shop.hak5.org

161–170 of 555 posts

Re: O.mg Cable

#161

Can somebody recommend good charging cables with the data lanes disabled? Would put my mind at ease when I'm traveling.

You could do that, but then you'd need to forgo USB Power Delivery, Qualcomm quick charging, etc. One thing I've heard other comments mention here is a USB condom (USB data blocker). It's just a male to female adapter with only the power lines patched through, not data lines.

USB condom LOL :D

Got any links for those?

Re: O.mg Cable

#162
post #139

Earlier quoted context omitted.

I don't expect good locks to keep people out. I expect good locks to be tamper evident so I know I can't trust my system.

Unfortunately, there aren't really all that many "good locks" on the market. The Lock Picking Lawyer on YouTube[1] has pretty much destroyed my faith in the modern lockmaking industry. [1]: https://www.youtube.com/c/lockpickinglawyer/videos

https://www.youtube.com/watch?v=qV8QKZNFxLw

Re: O.mg Cable

#163
post #44

See also: C-to-C charger cables with Bluetooth remote activated dual payloads: https://sneaktechnology.com/product/usbninja-custom-type-c-t... I easily modified mine to mimmic Apple Keyboard USB IDs to avoid notifications. Works great! Cellular GPS tracking car charger: https://www.amazon.com/Charger-Locator-Professional-Listenin... Cellular GPS tracking USB charger cable: https://www.ebay.com/itm/223990414124 I have…

Am I missing something? The worst thing the cable can do is send HID commands, and snoop on traffic between your USB-connectable device and PC?

You can actually do quite a lot with it, in terms of getting data and dropping various payloads:

There is also an editor and parser for Duckyscript – the scripting language used by the Rubber Ducky offensive USB drive – which acts as a virtual keyboard and launches keystroke injection attacks. That alone opens up a wide array of custom payloads for the O.MG cable. There also appear to be attack payloads for Windows and Ubuntu systems.

In April 2019, when the video was released, MG and the team of hackers working on the embedded cable were also developing extra functions such as detecting user activity/inactivity. According to the Hak5 listing, they also appear to have cracked another key problem: USB enumeration.

https://nakedsecurity.sophos.com/2019/10/02/omg-evil-lightni...

Re: O.mg Cable

#164

Can somebody recommend good charging cables with the data lanes disabled? Would put my mind at ease when I'm traveling.

I can't find any on Google that specifically are made without the data lane. Maybe these magnetic ones don't do data[0]. Could also try burning the data lanes on the lightning part of the cable[0] (although you might have issues if it's a lightning-to-C cable, I would guess it uses the data lanes for power negotiation). 0: https://www.alibaba.com/product-detail/3-in-1-cable-led-ligh... 1: https://nyansatan.github.io/…

Good warning, thank you.

I don't care much about quick charging when in a hotel room though. I just want to make sure my phone isn't being probed while I'm sleeping.

And when I need quick charging, I have the right cables and a strong external battery.

Re: O.mg Cable

#165
post #116

Earlier quoted context omitted.

Far better names than Microsoft or IBM

Microsoft Integrated Microcomputer Plug-and-Play Cable Office 365 Extended Subscription for Workgroups 2021 Powered by Bing

Google Play Game Libraries for Play (a real product name)

I can't find a link referencing it, sadly.

Re: O.mg Cable

#166
post #95
post #44

See also: C-to-C charger cables with Bluetooth remote activated dual payloads: https://sneaktechnology.com/product/usbninja-custom-type-c-t... I easily modified mine to mimmic Apple Keyboard USB IDs to avoid notifications. Works great! Cellular GPS tracking car charger: https://www.amazon.com/Charger-Locator-Professional-Listenin... Cellular GPS tracking USB charger cable: https://www.ebay.com/itm/223990414124 I have…

With growing car theft in the US I've been curious about implanting GPS trackers on my own older enthusiast vehicles. There appears to be many options on Amazon but I can't bring myself to trust any of them. Has anyone here gone down that road before?

[deleted]

Re: O.mg Cable

#167
post #116

Earlier quoted context omitted.

Far better names than Microsoft or IBM

Microsoft Integrated Microcomputer Plug-and-Play Cable Office 365 Extended Subscription for Workgroups 2021 Powered by Bing

Affectionately known as "MIMPCO 365 ESWPB 2021"

Hey! That's my Windows 10 product key!

(not really, but felt like it could be).

Re: O.mg Cable

#168

Earlier quoted context omitted.

The real answer? Because these people are just like us, geeks, nerds, techies, early adopters. They are just the same people we live and work with. The film Enemy of the State (1998) was science fiction except with the parts where the techy operators were just normal nerds like us. That what was most scary part of the film not the (at the time fantastic) surveillance.

They are really quite unlike us. And our sets of norms is, shall we say, somewhat different to theirs.

You are commenting on a forum full of people who build tools and technology for facebook and google and probably palintir and a thousand other facial recognition and thoughtcrime style systems.

Re: O.mg Cable

#169
post #52
post #44

See also: C-to-C charger cables with Bluetooth remote activated dual payloads: https://sneaktechnology.com/product/usbninja-custom-type-c-t... I easily modified mine to mimmic Apple Keyboard USB IDs to avoid notifications. Works great! Cellular GPS tracking car charger: https://www.amazon.com/Charger-Locator-Professional-Listenin... Cellular GPS tracking USB charger cable: https://www.ebay.com/itm/223990414124 I have…

When USB came out I was working in the defence sector. We closed the vector off with cages for the PCs with tied looms under desks, epoxy in all the holes we didn’t want people to use and with threat of being in deep shit.

That's hard if your laptop relies on USB-C for charging...

Re: O.mg Cable

#170
post #139

Earlier quoted context omitted.

I don't expect good locks to keep people out. I expect good locks to be tamper evident so I know I can't trust my system.

Unfortunately, there aren't really all that many "good locks" on the market. The Lock Picking Lawyer on YouTube[1] has pretty much destroyed my faith in the modern lockmaking industry. [1]: https://www.youtube.com/c/lockpickinglawyer/videos

I have hundreds of locks and lock bypass tools. I make sure to pay for ones that are not quickly defeated when it counts.

LPL covers most locks in the wild which are bad, but locks like the Protec2 are quite strong and while it is implied one person in the world can beat it with custom tools (huxleypig)... even then not quickly.

Post reply on HN