301–310 of 328 posts
Earlier quoted context omitted.
> They'll plug in the phone, unlock it, and browse the internet. iOS devices (maybe Android too, idk) ask you if you want to allow new accessories to access your device. That's why they said you need an exploit.
If you attack the right part of the USB stack, the prompt and its answer dont matter.
Earlier quoted context omitted.
I don't get it, even after I reset my phone it's still locked, and by default not sharing data via USB. What am I missing?
If the USB connection truly doesn't get data, your charging experience is unsatisfactory: there's no way for the phone to negotiate higher wattage. Not "sharing data" doesn't really mean not sharing data.
Earlier quoted context omitted.
plz explain. I have something similar to these https://www.amazon.com/OffGrid-Blocker-Unwanted-Transfer-Pro... And it seems to charge quick enough (albeit never timed it)...
The way USB high power charging works is that unless the charger and the device agree on high power the charger just charges at the older pre-high power USB rate. That's why you can plug ancient devices into a high power charger without worry that they will get fried. The way the charger and the device agree on how much power the charger should supply involves the data lines. Thus, if you simply drill out the data li…
A 24-pin “serial bus” might be getting a little crazy.
Earlier quoted context omitted.
I know I don’t but surely some people do perhaps hacker news is merely a conversation prompt aggregator
I mean the upstream comment is basically saying don't trust clicking any links on the Internet--even on a site that presumably weeds out really dodgy stuff quickly. Indeed, not using the Internet is a solid, if rather extreme, security process to follow.
Earlier quoted context omitted.
> but what can you really do? Get a USB condom, for instance, practice safer charging. :)
This is a joke, but it could actually be a thing. An isolator that you can use to protect your device while using those unknown ports. I would call it an isolator though, or firewall, not what you called it.
Earlier quoted context omitted.
It's not a joke, it's the (informal) industry term. See this for example: https://www.zdnet.com/article/protect-your-data-with-a-usb-c... https://lifehacker.com/use-a-usb-condom-to-protect-your-devi...
Cool, didn't know they exist.
[1] https://needgap.com/problems/73-usb-type-c-condom-usb-cybers...
Earlier quoted context omitted.
Cool, didn't know they exist.
Also now USB-C condom is also available, It was an issue since USB-C used data lines to negotiate voltage and I was tracking its need on my problem validation for a while now[1]. [1] https://needgap.com/problems/73-usb-type-c-condom-usb-cybers...
Oh, I didn't know that! So what is the solution for USB-C? How do the new USB condoms work?
Earlier quoted context omitted.
> but what can you really do? Get a USB condom, for instance, practice safer charging. :)
Android asks me if I want to have a device to allow access, This probably prevents attacks against the upper layer protocols. Is the risk vector here the USB stack itself? I think its possible to disable the USB 'protocol' in Linux, but it would require advanced permissions on android, which probably doesn't work out of the box, with IOS who knows or cares.
Yes, exactly. There are some comments here in the thread that discuss this in detail.
Earlier quoted context omitted.
Also now USB-C condom is also available, It was an issue since USB-C used data lines to negotiate voltage and I was tracking its need on my problem validation for a while now[1]. [1] https://needgap.com/problems/73-usb-type-c-condom-usb-cybers...
> Also now USB-C condom is also available Oh, I didn't know that! So what is the solution for USB-C? How do the new USB condoms work?
It really surprised me when this article blew up on Twitter as I thought it was common knowledge to never use public chargers and avoid untrusted usb anything after “bad usb”. It showed me how I live in a tech security bubble-a good reminder.
Many people, including many people on this site (and, yes, including myself) wouldn't think twice about plugging into an available port if they need a charge. Maybe I don't plug into an unlabeled port in some random location where it doesn't look like it belongs, but honestly I wouldn't think twice about charging at a designated area at a conference. (Though, yeah, I'd avoid a lot of "normal" activities if I ever att…