News for hackers. Stuff that matters.
Re:USB Type-C to Become More Secure with Authentication Stan... by phil21 on Wednesday January 02, 2019 @08:13PM (#18811988)
That seems like a very weak failsafe likely to be easily cracked and those bad actors only slowed down a bit - if history is any guide.

Why not implement something like detecting voltage drop between charger and device? Short circuit detection, etc. You can do a lot if you can have both sides communicate with each other, and at that point it matters a whole lot less if your cable lies to you plus you catch a lot of other failure conditions.

Re:USB Type-C to Become More Secure with Authentication Stan... by metaphor on Wednesday January 02, 2019 @11:29PM (#18812822)
Apparently, BC 1.2 spec verbiage suggests this is already a hard requirement:

The OTG device is required to limit the current it draws from the ACA such that VBUS_OTG remains above Vaca_opr min.

Re:USB Type-C to Become More Secure with Authentication Stan... by wpowiertowski on Wednesday January 02, 2019 @10:25PM (#18812585)
There are more use cases where being able to prove cryptographically the identity of the device is very useful from security point of view, PD is simply one of them.