News for hackers. Stuff that matters.

A comment on ​72 Hours of Pwnage: A Paranoid N00b Goes to Def Con. Parent comment

Re:​72 Hours of Pwnage: A Paranoid N00b Goes to Def Con by tronje on Friday August 19, 2016 @08:14AM (#12319486)
It sounds weird that they're selling key-logging sticks for $50 and spoofing routers for $100 at a convention where you'd think everyone can build that stuff by themselves for a much lower price.

Just to add to your point, I suppose.

[ Parent | on HN ]
Re:​72 Hours of Pwnage: A Paranoid N00b Goes to Def Con by busterarm on Friday August 19, 2016 @09:05AM (#12319674)
At a convention you can pay cash (semi-)anonymously where if you had to build that stuff you'd leave a paper trail.

Many I know in this group of people (DefCon/HOPE attendees) do things like trade around craigslist-cash-purchased laptops.

[ Parent | on HN ]
Re:​72 Hours of Pwnage: A Paranoid N00b Goes to Def Con by dublinben on Friday August 19, 2016 @11:41AM (#12320826)
It would also be a good place to anonymously buy Bitcoin for cash.
[ Parent | on HN ]
Re:​72 Hours of Pwnage: A Paranoid N00b Goes to Def Con by mseebach on Friday August 19, 2016 @11:22AM (#12320647)
> everyone can build that stuff by themselves for a much lower price

At volume. But if you only need one (or ten), assuming your time has some non-trivial value, it's much cheaper to just buy off the shelf.

[ Parent | on HN ]
Re:​72 Hours of Pwnage: A Paranoid N00b Goes to Def Con by pmorici on Friday August 19, 2016 @09:13AM (#12319706)
Even if you value your time as worthless then maybe you could build a hardware key logger for less than $50 in parts but I really doubt it.
[ Parent | on HN ]
Re:​72 Hours of Pwnage: A Paranoid N00b Goes to Def Con by riskable on Friday August 19, 2016 @11:40AM (#12320817)
There's no need to "build" anything for this purpose. Just buy a general-purpose microcontroller like this:

http://www.freetronics.com.au/products/leostick

...and stick it inside a generic keyboard (which has plenty of room).

I always thought that the fact that big corporations hand out the same keyboard to everyone enables these sorts of attacks. Any would-be spy could just make a handful of hardware key-logging generic HP and Dell keyboards and easily swap out any given keyboard at any given big company without having to even think.

I never use my employer's provided mouse/keyboard combo. Mostly because they're always absolute crap but also because I want to give any potential attackers a hard time. I can only imagine the look on some attacker's face when they show up at my desk and see custom hardware everywhere =)

[ Parent | on HN ]
Re:​72 Hours of Pwnage: A Paranoid N00b Goes to Def Con by Vexs on Friday August 19, 2016 @09:57AM (#12319996)
You can buy them from china really cheaply for a couple bucks.
[ Parent | on HN ]
Re:​72 Hours of Pwnage: A Paranoid N00b Goes to Def Con by marcosdumay on Friday August 19, 2016 @10:12AM (#12320120)
I'm sure a lot of people there has better projects to spend their time on than rebuilding commodity hardware.
[ Parent | on HN ]