61–70 of 159 posts
Would a high voltage loop, for breaking components, be a good solution to an attack like this? Like, fry the electronic components to verify it's just plain metal on the insides?
Perhaps, but it could start a fire. You might consider plugging into a power supply and measuring if there is any current draw.
[1]: https://twitter.com/LeaKissner/status/1085624255381827584
Earlier quoted context omitted.
How? I've never seen a device, certainly not a PC, that will just randomly connect to any router it sees without some sort of user input.
It looks like it could be a variant of this squashed down to fit in the connector of a cable. https://github.com/spacehuhn/wifi_ducky If it is, then the computer doesn't connect to a router at all. The USB cable could make itself available as a network that you remotely connect to then execute commands. The cable then types out your commands as it imitates a USB keyboard. Have you ever seen a device or PC that random…
This is scary. I mean someone can just replace the cables in my house and my phones and computer would become infected. I can't even imagine the headache this does for company's cybersecurity practices. A rogue janitor replaces the usb cables on some of the employees of a company that makes $INSERT_SUPER SECRET_TECH$ and done.
How? I've never seen a device, certainly not a PC, that will just randomly connect to any router it sees without some sort of user input.
That's one. Apparently there are least 28 more ways to use usb to attack a machine.
https://www.bleepingcomputer.com/news/security/heres-a-list-...
Earlier quoted context omitted.
It looks like it could be a variant of this squashed down to fit in the connector of a cable. https://github.com/spacehuhn/wifi_ducky If it is, then the computer doesn't connect to a router at all. The USB cable could make itself available as a network that you remotely connect to then execute commands. The cable then types out your commands as it imitates a USB keyboard. Have you ever seen a device or PC that random…
I can't tell if you're being sarcastic or not but yes, every device I own automatically accepts input from any keyboard I plug in.
This is scary. I mean someone can just replace the cables in my house and my phones and computer would become infected. I can't even imagine the headache this does for company's cybersecurity practices. A rogue janitor replaces the usb cables on some of the employees of a company that makes $INSERT_SUPER SECRET_TECH$ and done.
Earlier quoted context omitted.
How? I've never seen a device, certainly not a PC, that will just randomly connect to any router it sees without some sort of user input.
'How' is DHCP. That's one. Apparently there are least 28 more ways to use usb to attack a machine. https://www.bleepingcomputer.com/news/security/heres-a-list-...
Not without notice. Your computer won't connect to a wirless network automatically. So in order for this to work, the USB-device needs the same SSID and key. Then, in order to make it not suspicious (and get your data) you need to actually forward traffic to the internet. Not sure if those devices can repeat.
Emulating an USB ethernet might help you, as those will connect, but without uplink it's still suspicious.
Earlier quoted context omitted.
Wow, do you know it actually works? Seems cool.
Looking at the reviews, it seems that the "GPS" is just a cell tower ID, and the microphone is very quiet.
I'm wondering whether any of the Google security team will use this for their "leaving tradition" [1], or whether it's considered cheating, just too easy. [1]: https://twitter.com/LeaKissner/status/1085624255381827584
Huh, so all it takes is someone to break into your home when you're gone and swap a cable. Seems like privacy doesn't really exist for people who truly need it. Unless they're not using any technology.
Do you not use laptops? Or do you never leave your home?