News for hackers. Stuff that matters.

A comment on Exploiting vulnerabilities in Cellebrite UFED and Physical Analyzer. Parent comment

Re:Exploiting vulnerabilities in Cellebrite UFED and Physica... by ampdepolymerase on Wednesday April 21, 2021 @01:58PM (#26893183)
Indeed, how convenient. If it truly did fall off the truck right while he is on a walk then there is the possibility that is a rubber duckie attack. This is basically the equivalent of leaving a USB flash drive lying around. I hope the author took the necessary precautions when reverse engineering the device. Companies like cellebrite have deep connections to certain three letter communities that staging this sort of attacks trivial.
[ Parent | on HN ]
Re:Exploiting vulnerabilities in Cellebrite UFED and Physica... by jacquesm on Wednesday April 21, 2021 @04:13PM (#26894828)
"falling off a truck" is slang for "was stolen".
[ Parent | on HN ]
Re:Exploiting vulnerabilities in Cellebrite UFED and Physica... by ASalazarMX on Wednesday April 21, 2021 @04:39PM (#26895146)
TIL: https://idioms.thefreedictionary.com/fall+off+a+truck

Edit: looking up a bit more, it seems like this idiom is used to denote goods sold for cheap because they were stolen. Like "Bob is selling genuine iPhones very cheap, I fear they fell from the back of a truck".

Edit edit: I initially took it as "we won't tell how we got this", because I didn't know this idiom, but it seems several people agree with this interpretation. Not necessarily stolen, but obtained from an undisclosed source.

[ Parent | on HN ]
Re:Exploiting vulnerabilities in Cellebrite UFED and Physica... by dkjaudyeqooe on Wednesday April 21, 2021 @05:01PM (#26895405)
That isn't quite right. Although it's commonly used to describe something that's been stolen, it's more generally used to indicate that the speaker doesn't want to talk about where it came from. That's how it's been used in this article.
[ Parent | on HN ]
Re:Exploiting vulnerabilities in Cellebrite UFED and Physica... by thayne on Wednesday April 21, 2021 @04:38PM (#26895136)
Given the sort of business Cellebrite is in, they would probably still want to treat anything connected to it with an overabundance of caution.
[ Parent | on HN ]
Re:Exploiting vulnerabilities in Cellebrite UFED and Physica... by djoldman on Wednesday April 21, 2021 @02:27PM (#26893572)
I think we can be relatively confident that the connected machine was airgapped and perhaps run in a VM.

Perhaps even in a faraday cage..

[ Parent | on HN ]
Re:Exploiting vulnerabilities in Cellebrite UFED and Physica... by boredpenguin on Wednesday April 21, 2021 @05:08PM (#26895468)
> (...) and perhaps run in a VM.

One of the screenshots[0] shows the VMware Tools Service running, so yeah, looks like a virtualized guest.

[0]: https://signal.org/blog/images/cellebrite-dlls-loaded.png

[ Parent | on HN ]
Re:Exploiting vulnerabilities in Cellebrite UFED and Physica... by CPLX on Wednesday April 21, 2021 @02:05PM (#26893276)
> If it truly did fall of the truck

lol

[ Parent | on HN ]
Re:Exploiting vulnerabilities in Cellebrite UFED and Physica... by baby on Wednesday April 21, 2021 @04:03PM (#26894705)
Seeing reactions like GP’s I’m surprised at how many people don’t know this expression.
[ Parent | on HN ]
Re:Exploiting vulnerabilities in Cellebrite UFED and Physica... by ASalazarMX on Wednesday April 21, 2021 @04:43PM (#26895188)
I thought it was an euphemism because they couldn't reveal who gave it to them. Confessing it was stolen, even as an euphemism, is too blatant to be taken seriously IMO.
[ Parent | on HN ]
Re:Exploiting vulnerabilities in Cellebrite UFED and Physica... by bawolff on Wednesday April 21, 2021 @07:05PM (#26896511)
Even if you didn't, i think its pretty obvious from context.
[ Parent | on HN ]
Re:Exploiting vulnerabilities in Cellebrite UFED and Physica... by f38zf5vdt on Wednesday April 21, 2021 @04:49PM (#26895258)
If English is your second language, you may not have come across it. It's a very informal and infrequent idiom.
[ Parent | on HN ]
Re:Exploiting vulnerabilities in Cellebrite UFED and Physica... by baby on Wednesday April 21, 2021 @05:48PM (#26895873)
FWIW we have the exact same expression in French “c’est tombé du camion”
[ Parent | on HN ]
Re:Exploiting vulnerabilities in Cellebrite UFED and Physica... by CloselyChunky on Wednesday April 21, 2021 @06:02PM (#26896000)
Dito for German: "vom Laster gefallen"
[ Parent | on HN ]