News for hackers. Stuff that matters.

A comment on ATtention Spanned: Comprehensive Android Vulnerability Analysis of AT Commands. Parent comment

Re:ATtention Spanned: Comprehensive Android Vulnerability An... by p4bl0 on Friday August 24, 2018 @03:55PM (#17837457)
Yep, when using an untrusted USB power source, you can use what is called a "USB condom": either an adapter or a USB cable with the data wires cut letting only power go through. You can search the web for tutorial on which wires to cut in your USB cable, or for already made USB condoms to buy for less than $10 a piece.
[ Parent | on HN ]
Re:ATtention Spanned: Comprehensive Android Vulnerability An... by noja on Friday August 24, 2018 @04:01PM (#17837497)
You need to buy good ones otherwise the power negotiation doesn't happen and you get a slow charge.
[ Parent | on HN ]
Re:ATtention Spanned: Comprehensive Android Vulnerability An... by Immortalin on Friday August 24, 2018 @04:37PM (#17837727)
Any way to sandbox or proxy the power negotiation through the sheath? Laptop's USB controller chip could be vulnerable.
[ Parent | on HN ]
Re:ATtention Spanned: Comprehensive Android Vulnerability An... by simcop2387 on Friday August 24, 2018 @05:58PM (#17838130)
Not sure of any that do that, but I've seen quite a few that support most of the charging standards and negotiate the highest current available (still at 5V) so that the phone can usually charge reasonably fast.
[ Parent | on HN ]
Re:ATtention Spanned: Comprehensive Android Vulnerability An... by Avamander on Monday August 27, 2018 @06:02AM (#17850474)
There are chips you can buy that do power negotiation. You could design your own PCB that does the job.
[ Parent | on HN ]
Re:ATtention Spanned: Comprehensive Android Vulnerability An... by driverdan on Friday August 24, 2018 @06:01PM (#17838147)
> when using an untrusted USB power source...

Don't do that. Ever. Always use your own charger and cable, preferably the ones that came with the phone. If not make sure you're sourcing them from a reputable company and not an anonymous Chinese importer.

[ Parent | on HN ]