News for hackers. Stuff that matters.
Re:ATtention Spanned: Comprehensive Android Vulnerability An... by blattimwind on Friday August 24, 2018 @03:54PM (#17837450)
You can never trust software to block data flows. There is no such thing as "charge-only" as long as the cable still has data wires in it.

> We found that in some cases the "charge-only" USB mode may also fail to block AT commands.

Re:ATtention Spanned: Comprehensive Android Vulnerability An... by ForHackernews on Friday August 24, 2018 @04:20PM (#17837624)
This is a good point. I wonder if there's a market for "power-only" USB cables without data? Or would those fail to negotiate the right wattage?
Re:ATtention Spanned: Comprehensive Android Vulnerability An... by joezydeco on Friday August 24, 2018 @04:27PM (#17837665)
Re:ATtention Spanned: Comprehensive Android Vulnerability An... by digi_owl on Friday August 24, 2018 @04:42PM (#17837756)
While not at guaranteed, killing the data wires (or shorting them) makes the device think it is dealing with a charge only port.

Thus various companies have made devices that conditionally apply said short.

Here is one example: https://www.startech.com/Cables/USB-2.0/USB-Adapters/USB-2-F...

Re:ATtention Spanned: Comprehensive Android Vulnerability An... by joezydeco on Friday August 24, 2018 @04:51PM (#17837803)
The USB condom is more for situations where you are in public and wish to charge your device from an unknown and possibly hostile USB-A receptacle.
Re:ATtention Spanned: Comprehensive Android Vulnerability An... by DarkStar851 on Saturday August 25, 2018 @02:04AM (#17839780)
That Startech device still isolates the data line, it just has the added bonus of adding fast charging support. It'd be effective as a "USB condom" alternative.
Re:ATtention Spanned: Comprehensive Android Vulnerability An... by kageurufu on Friday August 24, 2018 @04:27PM (#17837664)
USB-C has separate lines for the "Configuration Channel", that is used to negotiate voltage and amperage. I'm unaware if the specification allows for cables without data lines, but I don't believe they would be required.

It would only work on USB-C host devices as well though, USB-A would still revert to either 500mA as long as the data lines are tied with a resistor

Re:ATtention Spanned: Comprehensive Android Vulnerability An... by c22 on Friday August 24, 2018 @06:06PM (#17838170)
I have several cables like this. It's always briefly mystifying when I accidentally grab one to sync some data. No negotiation, my fancy devices just charge at 500mA using these cables.