Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

O.mg Cable

shop.hak5.org

Post reply on HN
Print view View original

341–350 of 555 posts

Re: O.mg Cable

#341

Post by scthrow »

restingrobot wrote: post #295
abvdasker wrote: post #197

Earlier quoted context omitted.

There are probably some generalizable differences between software engineers who work for intelligence agencies vs private sector engineers. The most significant factor being that government engineers need to be able to get a security clearance and pass the attendant background checks and interviews. Most of the engineers I've worked with in the private sector probably couldn't pass these checks because of foreign na…

I just wanted to point out that obtaining a security clearance is not nearly as hard as you make it sound. For most organizations prior recreational drug use does not preclude you from the clearance.

I have a clearance and a somewhat checkered past.

A lot of what they look for is consistency in accounts of previous behaviors between you and any references / interviews they undertake, trying to assess if you're currently honest.

Another big thing they are trying to decide is if you are blackmailable.

(throwaway because I have the sort of clearance you are not supposed to advertise that you have)

Re: O.mg Cable

#343

Post by ukd1 »

mmastrac wrote: post #318
lrvick wrote: post #307

Earlier quoted context omitted.

You can also buy locks that can't be picked by people like me who have been at it 20 years. To keep people like me out for a while buy a Medeco. Pins not only need to be at the right height, but also the right rotation. They are a real pain in the ass to pick. I don't even know any locksmiths that can pick them. Good security for the money. Bosnian Bill and LPL... Okay they can pick them, but they are like the 0.0001…

I'm surprised TSA doesn't just cut it off, TBH.

Also this; especially after watching this happen to DeviantOllam

Re: O.mg Cable

#344

Post by lrvick »

_RPL5_ wrote: post #186

Who buys this stuff? Other things in the shop: > Screen Crab: This covert inline screen grabber sits between HDMI devices - like a computer and monitor, or console and television - to quietly capture screenshots. Perfect for sysadmins, pentesters and anyone wanting to record what's on a screen. > Shark Jack: This portable network attack tool is a pentesters best friend optimized for social engineering engagements and…

I buy this stuff, but I run a security consulting company.

I also make my own stuff like this from time to time. A lot of it is pretty easy. I could teach a class of people to make a badusb device from scratch, code and all, in an hour. Any USB capable microcontroller will do. Should we ban those too?

Bad actors have had more sophisticated hardware at their disposal for decades.

Just look at teardowns of credit card skimmers.

Hak5 is not helping those people. They are helping white hats catch up and helping spread awareness how easy this stuff is.

While your mind is adjusting to this, I encourage you to put "crown vic fleet keys" in Amazon and buy yourself keys to the police cars in your area.

The global state of security is a joke and we need people helping onboard whitehats to help teach people to do better.

Re: O.mg Cable

#345

Post by dekhn »

lrvick wrote: post #324
dekhn wrote: post #221

Earlier quoted context omitted.

I remember learning how to break master locks back in the 1980s. But I also heard they changed the mechanism after that.

I went to home depot a couple years ago and bought every model of master lock they sold. Picked all of them in an afternoon. I then taught kids to pick them.

do you mean combo locks, or key locks?

Re: O.mg Cable

#346

Post by lrvick »

WaitWaitWha wrote: post #244
zarq wrote: post #210

Earlier quoted context omitted.

"motivation" is usually the answer. Motivation can be (gaining) money, power, politics, etc.

Which begs the question, how do we raise future generations to have motivation which decreases malfeasance? I do not think there is a simple answer, but there is one out there...

I for one teach kids to hack and lockpick every chance I get.

When you can pick every lock around you it changes your worldview forever.

Kids should not avoid something wrong because they are physically stopped by a lock.

They should avoid it because it is wrong.

Better they learn these skills from someone that will teach the ethics to go with them.

Re: O.mg Cable

#347

Post by _RPL5_ »

WaitWaitWha wrote: post #198
_RPL5_ wrote: post #186

Who buys this stuff? Other things in the shop: > Screen Crab: This covert inline screen grabber sits between HDMI devices - like a computer and monitor, or console and television - to quietly capture screenshots. Perfect for sysadmins, pentesters and anyone wanting to record what's on a screen. > Shark Jack: This portable network attack tool is a pentesters best friend optimized for social engineering engagements and…

Yes, penetration testers, red teams, blue teams, auditors, and a myriad of other security conscious roles take advantage of these tools. > What prevents a malicious actor from buying and using these tools? Nothing. What prevents any actor from buying and using it maliciously? A significantly deeper question. I rather promote this.

Well, for one, the US government prevents private actors from buying all sorts of things. I am surprised that selling tools which potentially "enable cyber crime" hasn't triggered some overzealous regulator in DC yet. It seems like low-hanging fruit.

Re: O.mg Cable

#348

Post by Minenash »

system2 wrote: post #297
haswell wrote: post #247

When Apple inevitably removes all physical ports from some future iteration of iPhone, I wonder if they’ll use the existence of tech like this to market the change as a benefit to security. I’m simultaneously impressed, curious and disturbed.

I still don't understand why they even have usb connection on Iphone. I have not attached a cable to it for years. Wireless charging, bluetooth headset, and all other bluetooth devices. Icloud backup as well as government spyware called CSAM never needed a cable.

I still use the 3.5mm headphone jack over Bluetooth, because of the price of Bluetooth headphones, and also not having to ever worry about battery life. The only downside for me is that I can't use the headphones, and charge and walk around, but that's a lot less annoying then the other things. And with Bluetooth, there tends to be brief pauses (I also use my phone as my computers webcam. It's way better wired than the wifi for me (which honestly shouldn't be true, but).

I almost never use wireless charging, because it takes longer to charge, is everyday inefficient, and most people don't own wireless chargers. And even if they do, it's never in as many places as normal chargers. On an old phone, I ruined the port and had to only use wireless charging, and it was so annoying.

And app development is so much nicer when you have a USB connection. When I lost the ability to do so, coding was a good amount more work

Re: O.mg Cable

#349

Post by djur »

JTbane wrote: post #325
bigiain wrote: post #304

Earlier quoted context omitted.

> a ridiculous concept Says a guy who’s never had a friend or family member who’s been stalked.

If someone can get close enough to drop an AirTag on your person or in your car, they can harm you regardless.

A lot of people have the opportunity to interact with your (unattended) car or your belongings in situations where they couldn't harm you without taking a substantial risk. Imagine a person you interact with at a bar who drops an AirTag in your purse while you are briefly distracted.

Re: O.mg Cable

#350

Post by batch12 »

jokethrowaway wrote: post #320
xyzal wrote: post #156

Earlier quoted context omitted.

You imply hacking human minds to be more acceptable than hacking computers?

Absolutely. It's the human mind's responsibility not to be "hacked", by which I assume you mean exploited to e.g. mindlessly scroll Facebook all day. If most people are weak enough to become matrix-like slaves to the machine, so be it. I don't believe in free will and I don't think we need to preserve human life in a certain way (e.g. the way our ancestors lived). Sure, a lot of people will fail this test, or maybe t…

If you don't believe in free will, why should anyone care about your will to preserve your privacy? Sounds like you only believe in your own free will.
Post reply on HN