41–50 of 159 posts
Earlier quoted context omitted.
A secretly-IoT keyboard that shares your key presses and may "type" malicious stuff when you're not looking at it; the OS wouldn't be able to tell it's not you doing the typing. Not scary at all, no sir.
It can't read your keypresses (I think)
Earlier quoted context omitted.
It can't read your keypresses (I think)
It can't (unless it's the keyboard cable).
A windows hack may be - The “mouse” would ask to move to leftmost bottom corner then click. Type searching terms like Cmd. Then if can get hold of the windows one is in ...
Any better idea?
I guess even some sort of "signed device protocol" will not work. An attacker can just create a device that guesses the device identifier (or whatever is used to create the signature). Then, the attacker device can just keep guessing until it gets it right. Chances are, some serial number or similar will be used for this, so continuous guessing is feasible. Will the solution to this, then, be to have some sort of "sm…
About a month ago I found a similar device on aliexpress that has GPS and SIM card slot: https://www.aliexpress.com/item/1m-USB-Charging-Data-Cable-f... ?
About a month ago I found a similar device on aliexpress that has GPS and SIM card slot: https://www.aliexpress.com/item/1m-USB-Charging-Data-Cable-f... ?
The video appeared to have it connect directly to the phone or to the network they both were on.
I guess even some sort of "signed device protocol" will not work. An attacker can just create a device that guesses the device identifier (or whatever is used to create the signature). Then, the attacker device can just keep guessing until it gets it right. Chances are, some serial number or similar will be used for this, so continuous guessing is feasible. Will the solution to this, then, be to have some sort of "sm…
Even that's not enough. If you're feeling extra-evil you could tamper with the keyboard switches/traces to do whatever evil stuff you want. It's not like you can authenticate the on/off state at a switch level.
About a month ago I found a similar device on aliexpress that has GPS and SIM card slot: https://www.aliexpress.com/item/1m-USB-Charging-Data-Cable-f... ?
Wow, do you know it actually works? Seems cool.
Earlier quoted context omitted.
How? I've never seen a device, certainly not a PC, that will just randomly connect to any router it sees without some sort of user input.
My understanding is that it allows an attacker connected to it via WiFi to mess with the plugged-in computer using USB (pretending to be a keyboard). See the Twitter video: https://mg.lol/blog/omg-cable/