Live data from Hacker News

O.mg Cable

shop.hak5.org

41–50 of 555 posts

Re: O.mg Cable

#41

Wow! Is the trick that we now have powerful microcomputers small enough to fit into a USB plug? That's pretty incredible technology. How many years ago did this become possible? My IT security training is dated, I am aware of the risks of plugging in a random USB key, but just a cable from a helpful "coworker"? Yikes.

Seems to be very tech-involved though.

Re: O.mg Cable

#42
post #6

Wow! Is the trick that we now have powerful microcomputers small enough to fit into a USB plug? That's pretty incredible technology. How many years ago did this become possible? My IT security training is dated, I am aware of the risks of plugging in a random USB key, but just a cable from a helpful "coworker"? Yikes.

That level of miniaturization is far older than Apple's removal of the iPhone headphone jack in 2016, but the related lightning-to-audio jack dongle had a microcontroller with a DAC inside that you'd never think existed due to the form factor.

The Lightning-to-HDMI adapter is also an insane miniaturization. It runs a (very) stripped down version of iOS/darwin (not sure what apple counts it as) that is loaded in about a second when you plug in the phone, establishes a network connection, and streams compressed video frames over the network over USB to the HDMI.

That's why when you use the iPhone HDMI adapter, everything looks a little bit compressed. Because it is.

Re: O.mg Cable

#43

Earlier quoted context omitted.

I'm in San Francisco, so not Seattle, but cars get broken into for the sport of it by this point. A friend's had her window broken and used, gross dog leashes and an old Nokia charger stolen. The lost hours of work to replace the window was the real cost to her dog walking business.

Just park with your windows open if there's nothing they can really take. Repairing the window isn't with the cost or the time.

That might help in San Francisco, but in Seattle, that's lost hours dealing with a soaked interior.

Re: O.mg Cable

#44
See also:

C-to-C charger cables with Bluetooth remote activated dual payloads: https://sneaktechnology.com/product/usbninja-custom-type-c-t...

I easily modified mine to mimmic Apple Keyboard USB IDs to avoid notifications. Works great!

Cellular GPS tracking car charger: https://www.amazon.com/Charger-Locator-Professional-Listenin...

Cellular GPS tracking USB charger cable: https://www.ebay.com/itm/223990414124

I have been making, collecting, and testing toys like this for more than a decade.

It is a race to the bottom on price now.

Your best defense for USB code execution attacks is use Linux with USBGuard or QubesOS with the default USB quarantine VM.

Windows and Mac users are currently easy targets. I don't know of any good defenses there.

Re: O.mg Cable

#45
post #7
post #5

Took me a moment to realise, but this is for keyboards, not iPhones. I don't think (?) anybody can access anything from an iPhone using an evil cable (using publicly-known attacks).

I’m kind of surprised that Apple doesn’t encrypt keystrokes between its keyboards and the host machine, given than they have the capability to enable the keyboard to authenticate the host using PKI. Maybe this is on their todo list.

You kind of get that with Bluetooth keyboards.

Re: O.mg Cable

#46
This makes me miss older, simpler protocols. Sure, a parallel cable could also be compromised to snoop but at least it couldn't pretend to be some other device or install rootkits.

Re: O.mg Cable

#48

Earlier quoted context omitted.

I'm in San Francisco, so not Seattle, but cars get broken into for the sport of it by this point. A friend's had her window broken and used, gross dog leashes and an old Nokia charger stolen. The lost hours of work to replace the window was the real cost to her dog walking business.

Just park with your windows open if there's nothing they can really take. Repairing the window isn't with the cost or the time.

Problem in San Francisco is, you'll get people sleeping in your car if you do that.

Re: O.mg Cable

#49
post #14
post #6

Earlier quoted context omitted.

That level of miniaturization is far older than Apple's removal of the iPhone headphone jack in 2016, but the related lightning-to-audio jack dongle had a microcontroller with a DAC inside that you'd never think existed due to the form factor.

Just for reference, here are a couple breakdowns of how impressive the iPhone headphone jack is. It is impressive how good it is and how tiny it is. https://www.ifixit.com/News/8448/apple-audio-adapter-teardow... https://www.kenrockwell.com/apple/lightning-adapter-audio-qu...

It would be more impressive if they could fit it inside the phone.

Re: O.mg Cable

#50
Does it work like a normal USB Cable, so can you still charge your phone with it and connect it to the PC?

Couldn't find this information. If yes, you can just switch someones cable in his bag and attack him with that. We need to be very careful in the future with our cables...

Post reply on HN