Live data from Hacker News

O.mg Cable

shop.hak5.org

501–510 of 555 posts

Re: O.mg Cable

#501

Earlier quoted context omitted.

I still don't understand why they even have usb connection on Iphone. I have not attached a cable to it for years. Wireless charging, bluetooth headset, and all other bluetooth devices. Icloud backup as well as government spyware called CSAM never needed a cable.

I use the USB connection every day to do iOS development. A high bandwidth reliable wired link is a very nice thing to have for dev.

They can sell developer phones if needed. The percentage of developers probably is not even 0.001%

Re: O.mg Cable

#502
post #420

Earlier quoted context omitted.

Cracking heads. The rest is just PR. They don't work for you. They know they don't work for you.

Tbf oakland is a low bar (as well as sf). Here just 15 mi down the road they investigated and arrested a credit card thief who stole my wife’s card and I didn’t even ask for it. They also regularly capture cat converter thieves with sting operations. Overall I’ve been quite impressed with San Mateo PD

We were also surprised by the Oakland thing, as I know they helped with petty crime where the damage was less than a full blown stolen car. It was not a very shady area and it was in their jurisdiction. I heard it's not that uncommon, and a SFPD officer told us that it's probably because we said the robbers where armed and they just don't get involved with that.

The car got recovered by an asset management crew though and it went smoothly AFAIK.

Re: O.mg Cable

#503

Earlier quoted context omitted.

A lot of the cellular gps trackers have ignition kill capability, where you can send it a specific sms message and it’ll pull a wire to ground or open circuit a pair of wires, which you can use to remotely kill the engine. A friend of mine got a motorcycle back by watching its movements via the gps tracking, and killing the engine while the guy was riding in a safe-ish and high visibility place, so the thief just par…

I imagine (not a lawyer) that this expose you to a variety of charges.

IANAL, but I think in California as long as you don't use excessive force it's ok, but yeah if you kill the engine at a high speed or if you get unlucky and the thief gets seriously injured then you will get in trouble if they want to go after you.

Re: O.mg Cable

#504

Earlier quoted context omitted.

You need to explicitly mount (in your ChromeOS settings) any USB devices to the Linux system. Other than that I'm not aware of any specific mitigations.

So if I plug in a usb keyboard or mouse, they do not work until I activate them in settings? Sounds like an easy way for grandma to buy Dell over Google

In the Linux environment specifically. The average user is not using the Linux environment, it has to be enabled in developer settings.

Re: O.mg Cable

#505

Earlier quoted context omitted.

Yes, of course - but if a country already had a well-oiled establishment civil-service which kept its finger on the pulse of the nation then it would already be aligned with the electorates' interests and voting-intent. I recognize I'm basically describing a utopia.

Any power structure naturally seeks permanence. Democratic elections with short office terms goes against the nature. If we are not vigilant, shadowy forces will take control of this mechanism too. Some could argue it already has happened.

I like how Putin describes his impression of the powers of the US President. https://www.youtube.com/watch?v=xykvrGpCW6E&ab_channel=Russi...

Re: O.mg Cable

#506
post #56
post #8

Earlier quoted context omitted.

It’s a copy of the NSA ANT Coppermouth cables. That was part of the Snowden leak, so it’s been possible since at least then (the doc itself is circa 2008) if you have a three-letter name and a national security black budget. https://en.m.wikipedia.org/wiki/NSA_ANT_catalog

Well the technology differs a bit. The NSA implant was a passive retroreflector implant, which when illuminated by powerful radio waves, broadcasted back what was being typed, or what was visible on screen. This seems to be more of a tiny chip that captures and stores keystrokes etc.

So, like The Thing?

Re: O.mg Cable

#507
post #57

Earlier quoted context omitted.

When I was frequently using things like this on coworkers in red teaming (back when being in an office was a thing) putting my own desktop in a steel cage with a good lock proved effective against retaliation. Then we moved on to attacking the firmware in each others keyboards.

Since this has generated some discussion on locks and picking, there's been some interesting developments on "unpickable locks" that sidestep the tolerance problem by decoupling setting the pins from testing them. I.e. pins are tested all at once after they are physically decoupled from the key & keyway, eliminating state space reduction attacks (aka picking one pin at a time) leaving only brute force. One such effor…

Whelp it seems I recalled incorrectly this time, because LPL did pick the second one open, via a weakness in the design that he believes can be patched. I don't think my sentiment was totally off base, but clearly my statement about not being picked was factually incorrect.

Re: O.mg Cable

#508

Earlier quoted context omitted.

Well it's a comparison. Not once on the security clearance paperwork is alcohol mentioned, while if you have smoked/eaten/etc. marijuana at ALL in the past 7 years, it's practically an instant deny unless it was under some exigent circumstance. You can even be denied if you don't partake but are close contacts with other marijuana users. Obviously if someone is _addicted_ to either, that is a security risk. But the e…

Can't you just lie?

They contact all your close contacts listed on the paperwork. Lying also constitutes perjury in this case.

The unofficial advice I’ve heard is to not even bother with SC if you use weed. Generally, it will be found out. I looked into this as needing an SC was a possibility with my current job.

Re: O.mg Cable

#509

Earlier quoted context omitted.

USB condom LOL :D Got any links for those?

https://duckduckgo.com/?q=USB+condom&ia=about

Thanks for exercising being snarky!

I very obviously meant concrete brands and models that people would recommend.

I'm touched that you think I can't search for stuff on the net. :D

Re: O.mg Cable

#510
post #455
post #203

Earlier quoted context omitted.

If you have a powerbank with you (which may be empty), you could also charge the powerbank using the untrusted power source, and at the same time charge the phone via powerbank to "sanitize" the source. This way you could still benefit from quickcharging.

Do you have references for powerbanks that support QuickCharge?

Most of them do nowadays. I used both Anker and Xiaomi and both were excellent.
Post reply on HN