News for hackers. Stuff that matters.

A comment on USB Type-C to Become More Secure with Authentication Standard. Parent comment

Re:USB Type-C to Become More Secure with Authentication Stan... by geofft on Wednesday January 02, 2019 @06:51PM (#18811514)
Isn't that the wrong direction? My concern is not so much that my phone will show up to an attacker as a storage device, which can generally be restricted or be set to require pairing - my concern is that the attacker will show up to my phone (or laptop) as an accessory, in particular as a keyboard and mouse and perhaps an external display, at which point they can click through any permission or pairing prompts the OS might try to show.
[ Parent | on HN ]
Re:USB Type-C to Become More Secure with Authentication Stan... by kwhitefoot on Monday January 07, 2019 @06:31AM (#18844394)
Definitely!

If my Moto G5+ is locked then it seems that plugging in a keyboard behaves pretty much like plugging a keyboard into a desktop or laptop computer except that it doesn't respond to c-a-del.

I can unlock from the external keyboard by pressing the windows key and then typing my pin number but the multimedia keys and print screen on the keyboard work even with the screen locked.

I would rather that it didn't do any of that until I give permission on the mobile itself.

[ Parent | on HN ]