Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

O.mg Cable

shop.hak5.org

Post reply on HN
Print view View original

231–240 of 555 posts

Re: O.mg Cable

#231

Post by ttul »

VenTatsu wrote: post #75
mikestew wrote: post #38

Earlier quoted context omitted.

That’s...not what parent typed. Use whatever keyboard you like, but you’ll only get E2EE with an Apple keyboard.

The cable claims that it's a random 3rd party keyboard when it talks to the Mac, the cable claims it's a random non Apple device when it talks to the keyboard, the keyboard falls back to non-encrypted mode as it's not on a product that supports it. Man in the middle is hard to prevent when you need to be compatible with incredibly broken insecure legacy protocols. Apple could maybe go the route that all new Apple key…

And does Apple care? Unlikely… Preventing MITM cable hacks is not a common use case.

Re: O.mg Cable

#233

Post by kybernetikos »

Eiriksmal wrote: post #3

Wow! Is the trick that we now have powerful microcomputers small enough to fit into a USB plug? That's pretty incredible technology. How many years ago did this become possible? My IT security training is dated, I am aware of the risks of plugging in a random USB key, but just a cable from a helpful "coworker"? Yikes.

> How many years ago did this become possible?

I don't know, but I do know that back in 2013 you could get an ARM computer running linux and a webserver with wifi and 16Gb storage in a space the size of an SD card. That is still a bit too big to fit inside a USB plug without being obvious, but not by much. https://hackaday.com/2013/08/12/hacking-transcend-wifi-sd-ca...

Fitting the electronics inside the usb plug itself has been used for years in slimline usb memory sticks and in tiny readers for micro-sd too.

I expect that this has been possible for nearly 10 years, but maybe just not commercially viable for consumers for most of that.

Re: O.mg Cable

#234

Post by PeterisP »

lostmsu wrote: post #119
lrvick wrote: post #44

See also: C-to-C charger cables with Bluetooth remote activated dual payloads: https://sneaktechnology.com/product/usbninja-custom-type-c-t... I easily modified mine to mimmic Apple Keyboard USB IDs to avoid notifications. Works great! Cellular GPS tracking car charger: https://www.amazon.com/Charger-Locator-Professional-Listenin... Cellular GPS tracking USB charger cable: https://www.ebay.com/itm/223990414124 I have…

Am I missing something? The worst thing the cable can do is send HID commands, and snoop on traffic between your USB-connectable device and PC?

"HID commands" are a big thing given sufficient automation. You can execute arbitrary code with just HID commands either by typing everything in, or by having the cable present a storage device from which to get data and using HID commands to enable the storage device, fetch and execute it.

Re: O.mg Cable

#235

Post by [deleted] »

Godel_unicode wrote: post #227
lrvick wrote: post #172

Earlier quoted context omitted.

Which is why you should never use Master Locks. I am pretty decent at lockpicking but I can't pick a Medeco or better in any practical amount of time and very few in the world can. Little bit more money vastly reduces your attack surface.

> Little bit more money Aren't medeco padlocks like $100, whereas master lock padlocks are less than $20?

[deleted]

Re: O.mg Cable

#236

Post by ghostly_s »

surfsvammel wrote: post #188
lb1lf wrote: post #137

Earlier quoted context omitted.

-Wouldn't an airtag (or two...) fit the bill nicely? (Assuming even car thieves use iPhones there's some poetic justice to be served in their own smartphones bringing them down...)

They will get a warning saying there is an air tag travelling with them. I have this problem. We have an air tag on one of my kids shoes when we are out, and whenever I’m not with them, my partner gets spammed with warnings on her phone saying there is an unknown air tag travelling with her.

> We have an air tag on one of my kids shoes when we are out

what the hell?

Re: O.mg Cable

#237

Post by ddalex »

kevinmgranger wrote: post #43
Karrot_Kream wrote: post #36

Earlier quoted context omitted.

Just park with your windows open if there's nothing they can really take. Repairing the window isn't with the cost or the time.

That might help in San Francisco, but in Seattle, that's lost hours dealing with a soaked interior.

It may be getting soaked in SF too, but with different kind of fluids

Re: O.mg Cable

#238

Post by PeterisP »

aabajian wrote: post #2

I live in Seattle and have had my car broken into three times. Each time, they steal my iPhone's USB cable. I wonder, could they add cellular connectivity to this cable and use it as a GPS locator?

Do you mean something like this - https://www.aliexpress.com/item/1005001759023561.html ? You'd just have to look for a version with the proper connector that you need, that particular example is microUSB but there are similar cables for iPhone.

Re: O.mg Cable

#239

Post by danachow »

dekhn wrote: post #221
xenadu02 wrote: post #84

Earlier quoted context omitted.

Most common locks can be easily picked with a tiny bit of practice. I'm completely incompetent but I can pick any Master lock in 5 minutes or less.

I remember learning how to break master locks back in the 1980s. But I also heard they changed the mechanism after that.

I’m pretty sure they did on a number of models, but it wasn’t for the better

Re: O.mg Cable

#240

Post by 1-more »

duped wrote: post #49
varikin wrote: post #14

Earlier quoted context omitted.

Just for reference, here are a couple breakdowns of how impressive the iPhone headphone jack is. It is impressive how good it is and how tiny it is. https://www.ifixit.com/News/8448/apple-audio-adapter-teardow... https://www.kenrockwell.com/apple/lightning-adapter-audio-qu...

It would be more impressive if they could fit it inside the phone.

remember project aria? Apple actually did that and everyone got mad!
Post reply on HN