Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

O.mg Cable

shop.hak5.org

Post reply on HN
Print view View original

71–80 of 555 posts

Re: O.mg Cable

#71

Post by emaro »

maqp wrote: post #56
NamTaf wrote: post #8

Earlier quoted context omitted.

It’s a copy of the NSA ANT Coppermouth cables. That was part of the Snowden leak, so it’s been possible since at least then (the doc itself is circa 2008) if you have a three-letter name and a national security black budget. https://en.m.wikipedia.org/wiki/NSA_ANT_catalog

Well the technology differs a bit. The NSA implant was a passive retroreflector implant, which when illuminated by powerful radio waves, broadcasted back what was being typed, or what was visible on screen. This seems to be more of a tiny chip that captures and stores keystrokes etc.

Including a web server and radio communication.

Re: O.mg Cable

#72

Post by gumby »

shadilay wrote: post #65
shapefrog wrote: post #64

You should use a data blocker when using an unknown USB cable to charge your phone. Occasionally described as a USB condom. Simply a Male to Female USB adaptor with the data wires not passed through.

Is that USB-PD compatible?

I have not seen one that is. You can block data access and revert to USB 2-level power "negotiation" with a couple of passives and that is all I've seen anyone do.

I did look into designing one a few years ago. The PD negotiation is quite complicated (and is done through the signaling lines, so you have to manipulate them yet block all other uses).

That was early days for USB C -- there may be better chip support for doing that today.

Re: O.mg Cable

#73

Post by post_break »

Been a follower of Hak5 since way back in the day. Even crashed at the hak house with Darren a long time ago. Cool to see them here since they actually hack stuff haha.

Re: O.mg Cable

#74

Post by Y_Y »

lucideer wrote: post #4
aabajian wrote: post #2

I live in Seattle and have had my car broken into three times. Each time, they steal my iPhone's USB cable. I wonder, could they add cellular connectivity to this cable and use it as a GPS locator?

Not sure about GPS but it includes remote access via WiFi, and some of the cables on offer quote "Long Range WiFi (2 KM+)"

Why can't all my devices have 2km WiFi‽

Re: O.mg Cable

#75

Post by VenTatsu »

mikestew wrote: post #38
girishso wrote: post #18

Earlier quoted context omitted.

So we can’t use third party keyboards with Apple devices? No thanks.

That’s...not what parent typed. Use whatever keyboard you like, but you’ll only get E2EE with an Apple keyboard.

The cable claims that it's a random 3rd party keyboard when it talks to the Mac, the cable claims it's a random non Apple device when it talks to the keyboard, the keyboard falls back to non-encrypted mode as it's not on a product that supports it.

Man in the middle is hard to prevent when you need to be compatible with incredibly broken insecure legacy protocols.

Apple could maybe go the route that all new Apple keyboards only work with new Macs and iOS devices, but that would mean that they can't work with any existing Apple hardware or third party systems.

Re: O.mg Cable

#77

Post by svnpenn »

NamTaf wrote: post #8
Eiriksmal wrote: post #3

Wow! Is the trick that we now have powerful microcomputers small enough to fit into a USB plug? That's pretty incredible technology. How many years ago did this become possible? My IT security training is dated, I am aware of the risks of plugging in a random USB key, but just a cable from a helpful "coworker"? Yikes.

It’s a copy of the NSA ANT Coppermouth cables. That was part of the Snowden leak, so it’s been possible since at least then (the doc itself is circa 2008) if you have a three-letter name and a national security black budget. https://en.m.wikipedia.org/wiki/NSA_ANT_catalog

https://wikipedia.org/wiki/NSA_ANT_catalog

Re: O.mg Cable

#78

Post by [deleted] »

shapefrog wrote: post #64

You should use a data blocker when using an unknown USB cable to charge your phone. Occasionally described as a USB condom. Simply a Male to Female USB adaptor with the data wires not passed through.

[deleted]

Re: O.mg Cable

#79

Post by hughrr »

lrvick wrote: post #57
hughrr wrote: post #52

Earlier quoted context omitted.

When USB came out I was working in the defence sector. We closed the vector off with cages for the PCs with tied looms under desks, epoxy in all the holes we didn’t want people to use and with threat of being in deep shit.

When I was frequently using things like this on coworkers in red teaming (back when being in an office was a thing) putting my own desktop in a steel cage with a good lock proved effective against retaliation. Then we moved on to attacking the firmware in each others keyboards.

We just broke the locks on the cages with a screwdriver. Locks only keep honest people honest.

Re: O.mg Cable

#80

Post by e40 »

lrvick wrote: post #44

See also: C-to-C charger cables with Bluetooth remote activated dual payloads: https://sneaktechnology.com/product/usbninja-custom-type-c-t... I easily modified mine to mimmic Apple Keyboard USB IDs to avoid notifications. Works great! Cellular GPS tracking car charger: https://www.amazon.com/Charger-Locator-Professional-Listenin... Cellular GPS tracking USB charger cable: https://www.ebay.com/itm/223990414124 I have…

Windows and Mac users are currently easy targets. I don't know of any good defenses there.

It's crazy to me that this is true. Does the government pay Microsoft and Apple to keep it this way, or are they just negligent?

Post reply on HN