81–90 of 159 posts
Would a high voltage loop, for breaking components, be a good solution to an attack like this? Like, fry the electronic components to verify it's just plain metal on the insides?
Earlier quoted context omitted.
It looks like this hack uses an esp8266, which supports WiFi. Most likely the chip is booting up its own WiFi network for the phone to connect to, the phone is sending the payload over this network, and running the usb exploit. Some esp family chips should also support Bluetooth.
Okay, so the attacker would need to be within range. Is that a correct understanding?
I guess even some sort of "signed device protocol" will not work. An attacker can just create a device that guesses the device identifier (or whatever is used to create the signature). Then, the attacker device can just keep guessing until it gets it right. Chances are, some serial number or similar will be used for this, so continuous guessing is feasible. Will the solution to this, then, be to have some sort of "sm…
On Windows XP this would display a “new device: keyboard connected” balloon and the Safely Remove Device icon would immediately set-off my spidersense - it’s unfortunate that newer releases of Windows hide those notifications by default and the only clue that something might be wrong would be hearing the generic device connected sound multiple times in quick succession which many users might think was their sound-car…
Anyway since we are assuming physical access, they could just swap out your keyboard for one that works normally until you go for lunch, then starts typing for itself..
This is scary. I mean someone can just replace the cables in my house and my phones and computer would become infected. I can't even imagine the headache this does for company's cybersecurity practices. A rogue janitor replaces the usb cables on some of the employees of a company that makes $INSERT_SUPER SECRET_TECH$ and done.
How? I've never seen a device, certainly not a PC, that will just randomly connect to any router it sees without some sort of user input.
That said, if you click the link next to BadUSB, they detail attacks whereby the device pretends to be a USB Ethernet adapter instead. And while you're right that stuff typically wants user input prior to connecting to WiFi networks, I don't think anything prompts before connecting to wired networks. The onboard WiFi could even make it appear to work, so as to not arouse suspicion (by simply bridging the pretend-ethernet to the WiFi), but now your attack has a MitM and a keyboard…
Needless to say, you don't want random USB devices getting plugged into your machine.
Earlier quoted context omitted.
Completely out of scope of anything but superpower espionage, but that got me wondering if you could do something useful with a nanoscale mechanical computer built the same way they do those microchip gyroscopes. The simplest would be a mechanical timer for toggling power only when there's no countermeasure scan going on, but I wonder if there are other clever things you could do if you had a nationstate budget
Ive made and will be giving a talk on what a TSCM team would use. My talk was accepted at CircleCityCon in Indianapolis IN. I've built a tablet capable of intercepting and injecting radio from 20MHz to 1.5GHz. https://ccc2019cfp.busyconf.com/activities/5c3a57314808fac10... https://mobile.twitter.com/CrankyLinuxUser/status/1097884386... Repo: https://gitlab.com/crankylinuxuser/siginttablet
Earlier quoted context omitted.
It can't (unless it's the keyboard cable).
Hid usually ok with systems and hence a wireless mouse and keyboard pretended. A windows hack may be - The “mouse” would ask to move to leftmost bottom corner then click. Type searching terms like Cmd . Then if can get hold of the windows one is in ... Any better idea?
Earlier quoted context omitted.
A secretly-IoT keyboard that shares your key presses and may "type" malicious stuff when you're not looking at it; the OS wouldn't be able to tell it's not you doing the typing. Not scary at all, no sir.
It can't read your keypresses (I think)
[1] https://twitter.com/realsexycyborg/status/103190315541447884...
[2] https://www.amazon.com/Jiusion-Listening-Surveillance-Quad-b...
Earlier quoted context omitted.
Ive made and will be giving a talk on what a TSCM team would use. My talk was accepted at CircleCityCon in Indianapolis IN. I've built a tablet capable of intercepting and injecting radio from 20MHz to 1.5GHz. https://ccc2019cfp.busyconf.com/activities/5c3a57314808fac10... https://mobile.twitter.com/CrankyLinuxUser/status/1097884386... Repo: https://gitlab.com/crankylinuxuser/siginttablet
Why would a TSCM want to inject traffic and potentially alert the adversary to the detection? Have you seen some of the spectrum analyzers built on HackRF?
There's a lot of wireless stuff out there, not using 802.11__ or BT specs and frequencies. Are these things secure? Probably not. Are they encrypted? Perhaps. Do they defend against replay? Likely not.
But in the end, how do we assess? Standard TSCM gear can do a good job scanning and finding peaks. But its not for protocol decoding and device assessments. My goal is to "Identify signals, categorize protocols for signals found, decode if possible, and attempt to access/exploit".
This is scary. I mean someone can just replace the cables in my house and my phones and computer would become infected. I can't even imagine the headache this does for company's cybersecurity practices. A rogue janitor replaces the usb cables on some of the employees of a company that makes $INSERT_SUPER SECRET_TECH$ and done.
Can a device like this be used do anything positive toward humanity?
Did I misunderstand something? (I'm genuinely curious!)
Edited: reworded (honest) question to be less negative.