Baraza
  • Communities
  • Create Post
  • Create Community
  • heart
    Support Lemmy
  • search
    Search
  • Login
  • Sign Up
brachiosaurus@mander.xyz to Today I Learned@lemmy.worldEnglish · 13 days ago

TIL for at last 15 years US government has been able to implant hardware into USB cables to turn them into hacking devices with wireless capability.

en.wikipedia.org

message-square
29
link
fedilink
389

TIL for at last 15 years US government has been able to implant hardware into USB cables to turn them into hacking devices with wireless capability.

en.wikipedia.org

brachiosaurus@mander.xyz to Today I Learned@lemmy.worldEnglish · 13 days ago
message-square
29
link
fedilink
ANT catalog - Wikipedia
en.wikipedia.org
external-link
alert-triangle
You must log in or # to comment.
  • 9point6@lemmy.world
    link
    fedilink
    English
    arrow-up
    75
    ·
    13 days ago

    Not just the US government, anyone has been able to do this for years

  • pipi1234@lemmy.world
    link
    fedilink
    English
    arrow-up
    25
    ·
    12 days ago

    I knew about these, but always thought I could spot them.

    I wouldn’t!!!

  • Fair Fairy@thelemmy.club
    link
    fedilink
    English
    arrow-up
    26
    arrow-down
    1
    ·
    12 days ago

    Ya no definitely. Anything just not a health care for people

    • Salamanderwizard@lemmy.world
      link
      fedilink
      English
      arrow-up
      7
      ·
      12 days ago

      The government is that dude who’ll talk a big game about how great he is, get ya in bed, fuck you and not even finger blast ya to the finish.

  • 「黃家駒 Wong Ka Kui」 | (aka: 鳳凰院 凶真 Hououin Kyouma)@sh.itjust.works
    link
    fedilink
    English
    arrow-up
    24
    ·
    13 days ago

    Pro Tip: Leave a unique mark somewhere on the cable so if someone switches it, you can tell it apart. Always check for the mark before you use the cable, every time.

    (Yes I actually do this, I’m paranoid)

    • Bunitonito@lemmy.world
      link
      fedilink
      English
      arrow-up
      5
      ·
      12 days ago

      If you’re really paranoid you should buy all your stuff in a brick and mortar store. You’d have to be high up on a list for it to even be worth someone’s time, but intercepting a package and swapping the contents is pretty easy to do, typical Tuesday multi-agency gun ring bust for some postal inspectors

      • 「黃家駒 Wong Ka Kui」 | (aka: 鳳凰院 凶真 Hououin Kyouma)@sh.itjust.works
        link
        fedilink
        English
        arrow-up
        5
        ·
        12 days ago

        My older brother is abusive, and I need precautions to be safe.

        That’s my threat model.

        I actually would rather run a phone with stock OS with verified boot, rather than LineageOS but with bootloader unlocked. Evil Maid from someone you know wanting fuck around with you is more scary to me than government tbh

        (I don’t have a pixel for graphene)

        Edit: Also these cables cost like $200 online from HAK5. My brother definitely can pull some shit if he tried. He’s in Computer Science in college.

        • okamiueru@lemmy.world
          link
          fedilink
          English
          arrow-up
          3
          ·
          12 days ago

          Is it not possible to lock the bootloader again with LineageOS?

          • 「黃家駒 Wong Ka Kui」 | (aka: 鳳凰院 凶真 Hououin Kyouma)@sh.itjust.works
            link
            fedilink
            English
            arrow-up
            4
            ·
            12 days ago

            Only with a few rare phones… most phones just gets bricked if you attempt to lock it under a custom os because they don’t support custom keys.

            Pixel supports it, but I don’t have a pixel. (If I did I would just use Graphene lol)

            New is expensive

            and I really distrust the used market… feels very sketchy and it could have hidden damage that doesn’t manifest itself until the return window is already passed (if they even allow a return at all), also I have a paranoia about getting an IMEI that a criminal have used and then cops come knocking thinking its ME doing the illegal activity (cuz you know they do the “oops wrong address” thing often and they’ve shot people to death over it )

  • Zer0_F0x@lemmy.world
    link
    fedilink
    English
    arrow-up
    21
    ·
    13 days ago

    We found out 15 years ago the hardware is probably older

  • Otter@lemmy.ca
    link
    fedilink
    English
    arrow-up
    18
    ·
    12 days ago

    You can see a CT scan of one of these

    https://www.techspot.com/news/105863-usb-c-cable-can-hide-lot-malicious-hardware.html

    • brachiosaurus@mander.xyzOP
      link
      fedilink
      English
      arrow-up
      5
      ·
      12 days ago

      damn i though they would use the type A connector because it’s bigger but it can be fit even into usb C

      • muusemuuse@sh.itjust.works
        link
        fedilink
        English
        arrow-up
        2
        ·
        12 days ago

        Apple did it with lightning.

  • fallaciousBasis@lemmy.world
    link
    fedilink
    English
    arrow-up
    18
    ·
    12 days ago

    Anyone can do this.

  • 7rokhym@lemmy.ca
    link
    fedilink
    English
    arrow-up
    17
    ·
    13 days ago

    USB condoms for charging exist for a reason.

    • okamiueru@lemmy.world
      link
      fedilink
      English
      arrow-up
      4
      ·
      12 days ago

      Would limit higher power charging

  • quediuspayu@lemmy.dbzer0.com
    link
    fedilink
    English
    arrow-up
    11
    ·
    13 days ago

    https://darknetdiaries.com/episode/161/

    There’s a darknet episode about these cables

  • muusemuuse@sh.itjust.works
    link
    fedilink
    English
    arrow-up
    10
    ·
    12 days ago

    Dude, we’ve been able to do that with a fucking arduino for years.

  • fossilesque@mander.xyz
    link
    fedilink
    English
    arrow-up
    7
    ·
    12 days ago

    Good thing I only buy cheap cables on aliexpress these days lmao

    • TrollTrollrolllol@lemmy.world
      link
      fedilink
      English
      arrow-up
      5
      ·
      11 days ago

      the Chinese government did it to those

      • fossilesque@mander.xyz
        link
        fedilink
        English
        arrow-up
        4
        arrow-down
        1
        ·
        11 days ago

        As for now they are welcome to my data more than Palantir lol.

  • Widdershins@lemmy.world
    link
    fedilink
    English
    arrow-up
    7
    ·
    12 days ago

    I’ve been using wireless chargers for years. I find it “more secure” in the sense that my phone’s port is full of gunk and if I want to wake up with full batteries I can count on wireless a lot more.

  • HugeNerd@lemmy.ca
    link
    fedilink
    English
    arrow-up
    5
    ·
    12 days ago

    Joke’s on you, I still use Firewire.

    • nutsack@lemmy.dbzer0.com
      link
      fedilink
      English
      arrow-up
      4
      ·
      12 days ago

      yeah that’s a good joke

  • scala@lemmy.ml
    link
    fedilink
    English
    arrow-up
    5
    ·
    12 days ago

    USB condom!

  • Itdidnttrickledown@lemmy.world
    link
    fedilink
    English
    arrow-up
    4
    ·
    12 days ago

    Any government and crooks as well. Its been possible a lot longer than fifteen years.

    Compromising computers with tech is nearly as old as computers themselves. The wireless aspect makes it more convenient but in no way is doing so new.

Today I Learned@lemmy.world

til@lemmy.world

Subscribe from Remote Instance

Create a post
You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: !til@lemmy.world

What did you learn today? Share it with us!

We learn something new every day. This is a community dedicated to informing each other and helping to spread knowledge.

The rules for posting and commenting, besides the rules defined here for lemmy.world, are as follows:

Rules (interactive)


Rule 1- All posts must begin with TIL. Linking to a source of info is optional, but highly recommended as it helps to spark discussion.

** Posts must be about an actual fact that you have learned, but it doesn’t matter if you learned it today. See Rule 6 for all exceptions.**



Rule 2- Your post subject cannot be illegal or NSFW material.

Your post subject cannot be illegal or NSFW material. You will be warned first, banned second.



Rule 3- Do not seek mental, medical and professional help here.

Do not seek mental, medical and professional help here. Breaking this rule will not get you or your post removed, but it will put you at risk, and possibly in danger.



Rule 4- No self promotion or upvote-farming of any kind.

That’s it.



Rule 5- No baiting or sealioning or promoting an agenda.

Posts and comments which, instead of being of an innocuous nature, are specifically intended (based on reports and in the opinion of our crack moderation team) to bait users into ideological wars on charged political topics will be removed and the authors warned - or banned - depending on severity.



Rule 6- Regarding non-TIL posts.

Provided it is about the community itself, you may post non-TIL posts using the [META] tag on your post title.



Rule 7- You can't harass or disturb other members.

If you vocally harass or discriminate against any individual member, you will be removed.

Likewise, if you are a member, sympathiser or a resemblant of a movement that is known to largely hate, mock, discriminate against, and/or want to take lives of a group of people, and you were provably vocal about your hate, then you will be banned on sight.

For further explanation, clarification and feedback about this rule, you may follow this link.



Rule 8- All comments should try to stay relevant to their parent content.

Rule 9- Reposts from other platforms are not allowed.

Let everyone have their own content.



Rule 10- Majority of bots aren't allowed to participate here.

Unless included in our Whitelist for Bots, your bot will not be allowed to participate in this community. To have your bot whitelisted, please contact the moderators for a short review.



Partnered Communities

You can view our partnered communities list by following this link. To partner with our community and be included, you are free to message the moderators or comment on a pinned post.

Community Moderation

For inquiry on becoming a moderator of this community, you may comment on the pinned post of the time, or simply shoot a message to the current moderators.

Visibility: Public
globe

This community can be federated to other instances and be posted/commented in by their users.

  • 417 users / day
  • 935 users / week
  • 3.25K users / month
  • 7.91K users / 6 months
  • 3 local subscribers
  • 28.1K subscribers
  • 1.24K Posts
  • 16.3K Comments
  • Modlog
  • mods:
  • Rooki@lemmy.world
  • _MoveSwiftly@lemmy.world
  • Thekingoflorda@lemmy.world
  • DriftingDeep@lemmy.world
  • eric@lemmy.world
  • Decoy321@lemmy.world
  • BE: 0.19.14
  • Modlog
  • Instances
  • Docs
  • Code
  • join-lemmy.org