Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

O.mg Cable

shop.hak5.org

Post reply on HN
Print view View original

381–390 of 555 posts

Re: O.mg Cable

#381

Post by baybal2 »

Eiriksmal wrote: post #3

Wow! Is the trick that we now have powerful microcomputers small enough to fit into a USB plug? That's pretty incredible technology. How many years ago did this become possible? My IT security training is dated, I am aware of the risks of plugging in a random USB key, but just a cable from a helpful "coworker"? Yikes.

> now have powerful microcomputers small enough to fit into a USB plug

Like 20 years ago? 32 bit micros were actually not that far behind low end CPUs until they start to fall off dramatically in the 90, and post-90nm age because perf was good enough.

After nineties, CPU improvements were guided as much by software getting worse, slower, and more shoddily written, than genuine need for more raw computing power.

Re: O.mg Cable

#382

Post by baybal2 »

aabajian wrote: post #2

I live in Seattle and have had my car broken into three times. Each time, they steal my iPhone's USB cable. I wonder, could they add cellular connectivity to this cable and use it as a GPS locator?

I think you need to consider an armoured Mercedes

Re: O.mg Cable

#383

Post by jdironman »

loxias wrote: post #376
DaiPlusPlus wrote: post #373

Earlier quoted context omitted.

> They could be you, they could be me! Couldn't be me: the private sector pays me waaaaaaaay more. Also, you can't work for the feds if you ever touch the ganja, which is ridiculous. Everyone I personally know in infosec leads a very... alternative west-coast lifestyle which is not conducive to career progression in an east-coast, button-down-shirt environment.

This. I entertained the idea of working in the public sector a while ago, for a brief time, until I learned that pot is fine in my past, but not in my present. "How the heck do you expect me to get the code written?" Also, I've been told that getting a clearance is more burden than blessing. You have restrictions that an "ordinary person" doesn't have, along with criminal penalties for violating them. Whereas, withou…

Not sure I understand those last two sentences. Could you clarify?

Re: O.mg Cable

#384

Post by throaway46546 »

happyopossum wrote: post #358
lrvick wrote: post #307

Earlier quoted context omitted.

You can also buy locks that can't be picked by people like me who have been at it 20 years. To keep people like me out for a while buy a Medeco. Pins not only need to be at the right height, but also the right rotation. They are a real pain in the ass to pick. I don't even know any locksmiths that can pick them. Good security for the money. Bosnian Bill and LPL... Okay they can pick them, but they are like the 0.0001…

> TSA has to call me to unlock them with my consent every time. No - no they don’t. Anything locked with a non-TSA compliant lock is fair game for the bolt cutters, and frankly probably draws a lot of extra attention. All you’re doing is asking for extra screening… [1] https://www.tsa.gov/blog/2014/02/18/tsa-travel-tips-tuesday-...

Not if you have a firearm in your luggage.

Re: O.mg Cable

#385

Post by exikyut »

HeyLaughingBoy wrote: post #246
Closi wrote: post #96

Earlier quoted context omitted.

Probably “Project Phoenix”. If you ask any project team to come up with a project name they will probably pick ‘Project Phoenix’.

That or NexGen/NextGen. Someone should do a study...

*Sigh*

...Telstra in Australia called the transition from its 3G network to 4G "Next-G".

Why is this suddenly so depressing lol ._.

Re: O.mg Cable

#386

Post by godelski »

Ajedi32 wrote: post #152
lrvick wrote: post #139

Earlier quoted context omitted.

I don't expect good locks to keep people out. I expect good locks to be tamper evident so I know I can't trust my system.

Unfortunately, there aren't really all that many "good locks" on the market. The Lock Picking Lawyer on YouTube[1] has pretty much destroyed my faith in the modern lockmaking industry. [1]: https://www.youtube.com/c/lockpickinglawyer/videos

Just because a highly skilled professional lock picker can pick a lock doesn't mean you can nor the parent's coworkers.

Re: O.mg Cable

#387

Post by tossaway9000 »

lrvick wrote: post #33
NamTaf wrote: post #8

Earlier quoted context omitted.

It’s a copy of the NSA ANT Coppermouth cables. That was part of the Snowden leak, so it’s been possible since at least then (the doc itself is circa 2008) if you have a three-letter name and a national security black budget. https://en.m.wikipedia.org/wiki/NSA_ANT_catalog

Attacks like this have been in use since long before that leak. See all the Sandisk U3 drive based badusb payloads that people could cleverly hide into all sorts of form factors.

Bunnie did a super neat talk about something similar

https://youtu.be/ruEn7TE4YMM

Re: O.mg Cable

#388

Post by chipsa »

happyopossum wrote: post #358
lrvick wrote: post #307

Earlier quoted context omitted.

You can also buy locks that can't be picked by people like me who have been at it 20 years. To keep people like me out for a while buy a Medeco. Pins not only need to be at the right height, but also the right rotation. They are a real pain in the ass to pick. I don't even know any locksmiths that can pick them. Good security for the money. Bosnian Bill and LPL... Okay they can pick them, but they are like the 0.0001…

> TSA has to call me to unlock them with my consent every time. No - no they don’t. Anything locked with a non-TSA compliant lock is fair game for the bolt cutters, and frankly probably draws a lot of extra attention. All you’re doing is asking for extra screening… [1] https://www.tsa.gov/blog/2014/02/18/tsa-travel-tips-tuesday-...

The part you're missing is : firearm means they shouldn't (legally can't) try to open the case without you.

Re: O.mg Cable

#389

Post by frickinLasers »

pvarangot wrote: post #179
tubbs wrote: post #95

Earlier quoted context omitted.

With growing car theft in the US I've been curious about implanting GPS trackers on my own older enthusiast vehicles. There appears to be many options on Amazon but I can't bring myself to trust any of them. Has anyone here gone down that road before?

I would only do this if you either know the police will help retrieve your car if you have the location, or if you are ready to engage the robbers yourself. Otherwise it's useless to know where it is. I have experience trying to get the cops to help in Oakland and San Jose and they really didn't want to.

This is ridiculous. Wtf are cops good for, then?

Re: O.mg Cable

#390

Post by ByteJockey »

thrownblown wrote: post #353
scthrow wrote: post #341

Earlier quoted context omitted.

I have a clearance and a somewhat checkered past. A lot of what they look for is consistency in accounts of previous behaviors between you and any references / interviews they undertake, trying to assess if you're currently honest. Another big thing they are trying to decide is if you are blackmailable. (throwaway because I have the sort of clearance you are not supposed to advertise that you have)

John McAfee discussing getting his security clearance when he worked for Lockheed-Martin: "They asked me very revealing questions.... Had I ever taken drugs? Yes. What kinds? Almost every kind. Uh, how much? A lot. Have you ever sold drugs? Yes. So I assumed I would never get the clearance but I did and it came in very quickly." (clearly decades ago, and he's less than reliable, but fun nonetheless!)

It's not so much a problem if you do drugs.

It's a problem if you do drugs and are hiding it from someone (say, family). Then you can be blackmailed.

Post reply on HN