Re:Malicious Charging Cable
by noizejoy on Monday March 02, 2020 @03:37AM
(#22462706)
Wow - it’s a strange one indeed. Your use case doesn’t even strike me as that far from a pretty normal scenario. But it illustrates, how much potential for malfeasance is introduced with the chains of “smart” components that we’re increasingly required to use. And even being vigilant becomes difficult to impossible, because there are just too many vectors of vulnerability. Kinda depressing...
[ Parent
| on HN ]
It is indeed.
(The most depressing thing to me is that people actually pay money for devices like Alexa and Google Voice which are designed to spy on them. Who needs to become a hacker when people will voluntarily give up their privacy for a shiny thing?)
They probably didn’t read George Orwell in their formative years :-/
Just for the record: I just unlocked my phone after it was plugged in to my computer all night and it put up the "trust this computer?" dialog. I did not confirm. Instead, I turned the phone off, and plugged it back in directly to my computer without the intervening hub and dock. This time it did NOT put up the trust dialog. I plugged it back in to the hub and it once again did NOT put up the dialog.
It's very weird, and the fact that the trust dialog does not display any kind of device fingerprint makes it impossible to know what is actually going on.
just wow - that’s pretty crazy - it sure would be interesting to find out what signals the logic/code behind the trust dialog actually looks for, and maybe even more interesting why it was designed that way, or if it’s just really buggy.