Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

O.mg Cable

shop.hak5.org

Post reply on HN
Print view View original

281–290 of 555 posts

Re: O.mg Cable

#281

Post by repiret »

Ajedi32 wrote: post #152
lrvick wrote: post #139

Earlier quoted context omitted.

I don't expect good locks to keep people out. I expect good locks to be tamper evident so I know I can't trust my system.

Unfortunately, there aren't really all that many "good locks" on the market. The Lock Picking Lawyer on YouTube[1] has pretty much destroyed my faith in the modern lockmaking industry. [1]: https://www.youtube.com/c/lockpickinglawyer/videos

He can defeat just about anything, but he’s also exceptionally skilled. As a consumer of locks, I expect them to be defeatable by a skilled lockpicker. But I don’t expect them to be defeatable by a bic pen or by reaching in the keyhole with an oddly shaped wire to move the locking paul.

You can buy locks that don’t have easy bypasses, and can’t be easily drilled, and can’t be picked by beginners.

Re: O.mg Cable

#282

Post by Sebb767 »

lrvick wrote: post #138
tubbs wrote: post #95

Earlier quoted context omitted.

With growing car theft in the US I've been curious about implanting GPS trackers on my own older enthusiast vehicles. There appears to be many options on Amazon but I can't bring myself to trust any of them. Has anyone here gone down that road before?

Check out AutoPi. Open source, plugs into your ODBII port so you can not only track your car but also get maintaince alerts etc.

> plugs into your ODBII port

Which is usually quite easy to check. It's not a guarantee, but with someone sophisticated enough to crack a modern car there's a good possibility they know to check the OBDII slot.

Re: O.mg Cable

#283

Post by akavel »

hirundo wrote: post #162
Ajedi32 wrote: post #152

Earlier quoted context omitted.

Unfortunately, there aren't really all that many "good locks" on the market. The Lock Picking Lawyer on YouTube[1] has pretty much destroyed my faith in the modern lockmaking industry. [1]: https://www.youtube.com/c/lockpickinglawyer/videos

https://www.youtube.com/watch?v=qV8QKZNFxLw

Apparently, picked here: https://youtu.be/ai5Hf-wPXFE

but check out this one instead: https://youtu.be/sES_Hbj92BQ - ~2h to open fully (though the author of the video claims impressioning could speed up the thing; anyway, reportedly attacking the door is just easier in this case)

Re: O.mg Cable

#284

Post by michaelt »

gruez wrote: post #255
lrvick wrote: post #57

Earlier quoted context omitted.

When I was frequently using things like this on coworkers in red teaming (back when being in an office was a thing) putting my own desktop in a steel cage with a good lock proved effective against retaliation. Then we moved on to attacking the firmware in each others keyboards.

>putting my own desktop in a steel cage with a good lock proved effective against retaliation. >Then we moved on to attacking the firmware in each others keyboards. In what world is hacking keyboard firmware easier than lockpicking?

I once saw a PC security case where instead of the lock cylinder retracting a bolt, it turned a screw thread and opened the case by about half a millimeter. It took the guy unlocking it a good fifty turns to get the PC out of it.

And there were two - one on each side. What's more, it was a tubular lock, so if you were single-pin picking you'd have to pick it 5 times per rotation.

Nothing that would stand up to a battery powered angle grinder, of course.

Re: O.mg Cable

#285

Post by hashkb »

AYBABTME wrote: post #262
agitator wrote: post #228

Earlier quoted context omitted.

If anything, by making devices like this accessible to the public, the end result is safer devices for everyone. Without products like this you have criminals, a small amount of enthusiasts/researchers, and government sponsored actors exploiting vulnerabilities. If you put it out in the open, much like open source software, everyone can do it, but there's more pressure to fix blatant vulnerabilities.

Isn't that the same argument people use in support of gun ownership?

The guns you can buy don't compare in any way to the guns the bad actors have. Apples and oranges.

Re: O.mg Cable

#286

Post by jayd16 »

gruez wrote: post #255
lrvick wrote: post #57

Earlier quoted context omitted.

When I was frequently using things like this on coworkers in red teaming (back when being in an office was a thing) putting my own desktop in a steel cage with a good lock proved effective against retaliation. Then we moved on to attacking the firmware in each others keyboards.

>putting my own desktop in a steel cage with a good lock proved effective against retaliation. >Then we moved on to attacking the firmware in each others keyboards. In what world is hacking keyboard firmware easier than lockpicking?

It's a gentleman's sport.

Re: O.mg Cable

#287

Post by hashkb »

burnished wrote: post #215
_RPL5_ wrote: post #186

Who buys this stuff? Other things in the shop: > Screen Crab: This covert inline screen grabber sits between HDMI devices - like a computer and monitor, or console and television - to quietly capture screenshots. Perfect for sysadmins, pentesters and anyone wanting to record what's on a screen. > Shark Jack: This portable network attack tool is a pentesters best friend optimized for social engineering engagements and…

I think the only thing you are missing is that most people most of the time don't want to hurt or bother others and that much of society functioning relies on this. Cause nothing stopping you from buying any of that, at what looks like very reasonable rates.

This is false. Most people will take advantage of any situation where they detect a low enough chance of consequences, regardleas of who is hurt. We act good because we don't want to be caught, embarrassed, or convicted and condemned.

It's not that most people want to hurt others. It's just that most people care only for themselves. Source: reality.

Re: O.mg Cable

#288

Post by not1ofU »

pdimitar wrote: post #90

Can somebody recommend good charging cables with the data lanes disabled? Would put my mind at ease when I'm traveling.

Somethink like this, it is adapter with data lanes removed, for charging in public places. There are other tools like the ones listed on the hak5 site also. https://maltronics.com/products/usb-protector The guy running the site also has a youtube channel focused on security related tech news https://www.youtube.com/c/Seytonic/featured.

Re: O.mg Cable

#289

Post by Godel_unicode »

gruez wrote: post #255
lrvick wrote: post #57

Earlier quoted context omitted.

When I was frequently using things like this on coworkers in red teaming (back when being in an office was a thing) putting my own desktop in a steel cage with a good lock proved effective against retaliation. Then we moved on to attacking the firmware in each others keyboards.

>putting my own desktop in a steel cage with a good lock proved effective against retaliation. >Then we moved on to attacking the firmware in each others keyboards. In what world is hacking keyboard firmware easier than lockpicking?

In the world where one is a firmware exploit developer and don't know how to pick locks...?

Re: O.mg Cable

#290

Post by mszcz »

AYBABTME wrote: post #262
agitator wrote: post #228

Earlier quoted context omitted.

If anything, by making devices like this accessible to the public, the end result is safer devices for everyone. Without products like this you have criminals, a small amount of enthusiasts/researchers, and government sponsored actors exploiting vulnerabilities. If you put it out in the open, much like open source software, everyone can do it, but there's more pressure to fix blatant vulnerabilities.

Isn't that the same argument people use in support of gun ownership?

I don’t think that it is. As I understand it the argument in favor of guns is that they would supposedly protect you against someone else with a gun.

I can’t protect myself from someone with a RubberDucky with a RubberDucky of my own. However, knowing that these tools exist and how easy they are to acquire and the ability to try one out for yourself might actually make you think twice about plugging that random cable or USB drive into your box.

Post reply on HN