Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

O.mg Cable

shop.hak5.org

Post reply on HN
Print view View original

291–300 of 555 posts

Re: O.mg Cable

#291

Post by thrashh »

kybernetikos wrote: post #233
Eiriksmal wrote: post #3

Wow! Is the trick that we now have powerful microcomputers small enough to fit into a USB plug? That's pretty incredible technology. How many years ago did this become possible? My IT security training is dated, I am aware of the risks of plugging in a random USB key, but just a cable from a helpful "coworker"? Yikes.

> How many years ago did this become possible? I don't know, but I do know that back in 2013 you could get an ARM computer running linux and a webserver with wifi and 16Gb storage in a space the size of an SD card. That is still a bit too big to fit inside a USB plug without being obvious, but not by much. https://hackaday.com/2013/08/12/hacking-transcend-wifi-sd-ca... Fitting the electronics inside the usb plug itse…

Eye-Fi started as a company making Wi-Fi SD cards in 2005.

Chips have been small for decades. What’s changed over the years is that it’s gotten cheaper and cheaper.

Re: O.mg Cable

#292

Post by lrvick »

gruez wrote: post #255
lrvick wrote: post #57

Earlier quoted context omitted.

When I was frequently using things like this on coworkers in red teaming (back when being in an office was a thing) putting my own desktop in a steel cage with a good lock proved effective against retaliation. Then we moved on to attacking the firmware in each others keyboards.

>putting my own desktop in a steel cage with a good lock proved effective against retaliation. >Then we moved on to attacking the firmware in each others keyboards. In what world is hacking keyboard firmware easier than lockpicking?

In a world where I am the one choosing the locks.

I taught everyone else involved to lockpick in the first place and chose locks well beyond any of our skill levels to pick.

Re: O.mg Cable

#293

Post by canadianfella »

vagrantJin wrote: post #279
after_care wrote: post #248

Earlier quoted context omitted.

Seems legit, kids can run away or be kidnapped. It’s important to know where your kids are.

> Seems legit, kids can run away or be kidnapped. It’s important to know where your kids are. Ah yes. This statement is more terrifying than Apples half-assed PR fireball a few days ago. The same folks who bought iphones because its has better "privacy" than Android... ...are using iphones to track their kids whereabouts. It's like a dystopian punchline masked in the Friends laugh track.

What’s the problem?

Re: O.mg Cable

#294

Post by judge2020 »

kag0 wrote: post #212
lisper wrote: post #62

I'm not sure what is scarier, the existence of this cable, or the amount of Javascript that this site tries to run when you visit it. According to my NoScript plugin, it's loading Javascript from at least 17 different domains.

Totally unrelated to this cable, but since you mention it... I've been trying to build web/single page applications using new ES modules and no build tool, so all dependencies are pulled from their creator/CDN rather than bundled locally. Would this set off flags for a no-script user?

If they use pure noscript with scripts disabled globally, then yes, it’ll just be unable to load the one first-party script.

Re: O.mg Cable

#295

Post by restingrobot »

abvdasker wrote: post #197
mrguyorama wrote: post #168

Earlier quoted context omitted.

You are commenting on a forum full of people who build tools and technology for facebook and google and probably palintir and a thousand other facial recognition and thoughtcrime style systems.

There are probably some generalizable differences between software engineers who work for intelligence agencies vs private sector engineers. The most significant factor being that government engineers need to be able to get a security clearance and pass the attendant background checks and interviews. Most of the engineers I've worked with in the private sector probably couldn't pass these checks because of foreign na…

I just wanted to point out that obtaining a security clearance is not nearly as hard as you make it sound. For most organizations prior recreational drug use does not preclude you from the clearance.

Re: O.mg Cable

#296

Post by kntmckenebrt »

WaitWaitWha wrote: post #202
cromat3 wrote: post #190

Earlier quoted context omitted.

Sounds horrible and for me it is unimaginable. In Croatia, you rarely hear that a car waa broken into even in bigger cities. In smaller towns a lot of people don't even bother to lock their cars.

Why do you think that is?

In countries like Croatia the police is busy catching criminals instead of helping them inject heroin, going after mean people on Twitter, or calculating if the robbed amount is under 900 USD and then apologising to the thief and giving him a ride home like the SF police do.

Re: O.mg Cable

#297

Post by system2 »

haswell wrote: post #247

When Apple inevitably removes all physical ports from some future iteration of iPhone, I wonder if they’ll use the existence of tech like this to market the change as a benefit to security. I’m simultaneously impressed, curious and disturbed.

I still don't understand why they even have usb connection on Iphone. I have not attached a cable to it for years. Wireless charging, bluetooth headset, and all other bluetooth devices. Icloud backup as well as government spyware called CSAM never needed a cable.

Re: O.mg Cable

#298

Post by yellowapple »

ghostly_s wrote: post #236
surfsvammel wrote: post #188

Earlier quoted context omitted.

They will get a warning saying there is an air tag travelling with them. I have this problem. We have an air tag on one of my kids shoes when we are out, and whenever I’m not with them, my partner gets spammed with warnings on her phone saying there is an unknown air tag travelling with her.

> We have an air tag on one of my kids shoes when we are out what the hell?

Right? Who the hell puts the tracker in a shoe? Shoes can be taken off.

Professionals put the trackers in the kids' teeth, a la Spy Kids.

Re: O.mg Cable

#299

Post by lrvick »

michaelt wrote: post #284
gruez wrote: post #255

Earlier quoted context omitted.

>putting my own desktop in a steel cage with a good lock proved effective against retaliation. >Then we moved on to attacking the firmware in each others keyboards. In what world is hacking keyboard firmware easier than lockpicking?

I once saw a PC security case where instead of the lock cylinder retracting a bolt, it turned a screw thread and opened the case by about half a millimeter. It took the guy unlocking it a good fifty turns to get the PC out of it. And there were two - one on each side. What's more, it was a tubular lock, so if you were single-pin picking you'd have to pick it 5 times per rotation. Nothing that would stand up to a batt…

I don't know anyone that would SPP a tubular lock in the field.

$40 for tools designed to pick all pins at once and make a "key" with some quick impressioning motions.

Some do have spool pins. In those cases you will need manual fiddling to pick it once then you have a key to keep spinning.

Still, sounds like an interesting design. Link?

Re: O.mg Cable

#300

Post by [deleted] »

restingrobot wrote: post #295
abvdasker wrote: post #197

Earlier quoted context omitted.

There are probably some generalizable differences between software engineers who work for intelligence agencies vs private sector engineers. The most significant factor being that government engineers need to be able to get a security clearance and pass the attendant background checks and interviews. Most of the engineers I've worked with in the private sector probably couldn't pass these checks because of foreign na…

I just wanted to point out that obtaining a security clearance is not nearly as hard as you make it sound. For most organizations prior recreational drug use does not preclude you from the clearance.

[deleted]
Post reply on HN