Live data from Hacker News

O.mg Cable

shop.hak5.org

31–40 of 555 posts

Re: O.mg Cable

#31
post #19

Earlier quoted context omitted.

Lightning cables are expensive, and Apple is definitely encouraging car theft by not including them in the box anymore. edit: this was a joke and it got appropriately downvoted. I regret nothing.

A cable that costs $20 - $30 retail NEW doesn't seem worth risking jail time over.

It's worth it for someone. I've had people break into my car for 3 quarters and a half ounce of super glue.

Re: O.mg Cable

#32

As an aside: somewhat ironic that a shop selling gear such as this has such a large 3rd-party javascript footprint. At least some of that js is required for the page to work, as I'm unable to see pictures of the device. I counted 25 3rd party domains in uMatrix. That's quite the attack surface.

[deleted]

Re: O.mg Cable

#33
post #8

Wow! Is the trick that we now have powerful microcomputers small enough to fit into a USB plug? That's pretty incredible technology. How many years ago did this become possible? My IT security training is dated, I am aware of the risks of plugging in a random USB key, but just a cable from a helpful "coworker"? Yikes.

It’s a copy of the NSA ANT Coppermouth cables. That was part of the Snowden leak, so it’s been possible since at least then (the doc itself is circa 2008) if you have a three-letter name and a national security black budget. https://en.m.wikipedia.org/wiki/NSA_ANT_catalog

Attacks like this have been in use since long before that leak.

See all the Sandisk U3 drive based badusb payloads that people could cleverly hide into all sorts of form factors.

Re: O.mg Cable

#34

I want to need one of these things. Pranks on my friends are difficult with a lockdown and permanent wfh status, so I’d need a better reason. Can anyone think of non evil uses? My imagination is stunted I guess.

Mine is too, I can only come up with prank ideas.

I do wonder how thoroughly they vet their customers, and what silly things I could get up to with one.

Re: O.mg Cable

#36
post #9

Earlier quoted context omitted.

Are they really breaking into your car just to steal your USB cable or is there other stuff you leave in plain sight?

I'm in San Francisco, so not Seattle, but cars get broken into for the sport of it by this point. A friend's had her window broken and used, gross dog leashes and an old Nokia charger stolen. The lost hours of work to replace the window was the real cost to her dog walking business.

Just park with your windows open if there's nothing they can really take. Repairing the window isn't with the cost or the time.

Re: O.mg Cable

#37

Wow! Is the trick that we now have powerful microcomputers small enough to fit into a USB plug? That's pretty incredible technology. How many years ago did this become possible? My IT security training is dated, I am aware of the risks of plugging in a random USB key, but just a cable from a helpful "coworker"? Yikes.

See also http://tomu.im/.

Re: O.mg Cable

#38
post #7

Earlier quoted context omitted.

I’m kind of surprised that Apple doesn’t encrypt keystrokes between its keyboards and the host machine, given than they have the capability to enable the keyboard to authenticate the host using PKI. Maybe this is on their todo list.

So we can’t use third party keyboards with Apple devices? No thanks.

That’s...not what parent typed. Use whatever keyboard you like, but you’ll only get E2EE with an Apple keyboard.

Re: O.mg Cable

#40
post #8

Earlier quoted context omitted.

It’s a copy of the NSA ANT Coppermouth cables. That was part of the Snowden leak, so it’s been possible since at least then (the doc itself is circa 2008) if you have a three-letter name and a national security black budget. https://en.m.wikipedia.org/wiki/NSA_ANT_catalog

Why is the NSA so good at coming up with sweet codenames for things? I swear it's someone's full time job there.

The real answer? Because these people are just like us, geeks, nerds, techies, early adopters. They are just the same people we live and work with.

The film Enemy of the State (1998) was science fiction except with the parts where the techy operators were just normal nerds like us. That what was most scary part of the film not the (at the time fantastic) surveillance.

Post reply on HN