221–230 of 328 posts
Earlier quoted context omitted.
hacker news is a link aggregator
If you've spent any time on here you know that no one actually clicks the links to read the article. Users need only trust the pages with an orange header.
perhaps hacker news is merely a conversation prompt aggregator
Earlier quoted context omitted.
If you've spent any time on here you know that no one actually clicks the links to read the article. Users need only trust the pages with an orange header.
I know I don’t but surely some people do perhaps hacker news is merely a conversation prompt aggregator
Earlier quoted context omitted.
I know I don’t but surely some people do perhaps hacker news is merely a conversation prompt aggregator
HN as a separate entity has practically no value, it could just be reddit.com/r/hackernews and it'd be practically the same.
I'm seeing a lot of hysteria in response to this random tweet by the Denver FBI's social media person. Do we know of a single real-world use of this hypothetical exploit? Do we know that iOS's (and presumably Android's) protection against untrusted device access isn't enough?
Thousands of O.MG cables are out in the wild… https://shop.hak5.org/products/omg-cable
I suppose the difference is that people may be using the cable to connect to a device where that prompt is expected, in contrast to the "charging port in an airport" scenario where it would seem appropriately alarming.
Earlier quoted context omitted.
Anecdotally, I have had a previous iphone infected by using a public charging station at SFO a few years ago.
Can you elaborate on this? What kind of phone? Android or iOS? Fully patched? What kind of infection? How did you discover it? How did you get rid of it?
This is like abstinence-only education. Use a USB condom: https://www.zdnet.com/article/protect-your-data-with-a-usb-c...
Earlier quoted context omitted.
A website would be hard pressed to emulate a keyboard plugged into my computer.
very true. nevertheless, I’m curious if you implicitly trust the security of links on HN? I know I largely do, but perhaps that’s unwise, especially given the site’s stated target audience
It really surprised me when this article blew up on Twitter as I thought it was common knowledge to never use public chargers and avoid untrusted usb anything after “bad usb”. It showed me how I live in a tech security bubble-a good reminder.
I'll never be able to bring up this risk with USB to those guys.
Edit: IoC typo -> IoT
But how? Most devices are charge-only by default, most users have USB debugging disabled, and those who know how to enable it, won't allow the adb server to connect to the phone (you have to explicitly give it permission).