News for hackers. Stuff that matters.
Re:Wireless Charging Power Side-Channel Attacks by aetherspawn on Monday September 13, 2021 @05:53AM (#28509466)
The severity and number of side-channel attacks is slowly becoming cripplingly ridiculous. At what point do we just give up with side-channel attacks on consumer devices and assume the mentality that all consumer devices connected to the internet should be treated as insecure by default.
Re:Wireless Charging Power Side-Channel Attacks by badRNG on Monday September 13, 2021 @11:54AM (#28513058)
> At what point do we just give up with side-channel attacks on consumer devices and assume the mentality that all consumer devices connected to the internet should be treated as insecure by default.

There is always an endless stream of vulnerabilities for every piece of tech you use: software, OS, router, etc. This fact is not a good reason to embrace security nihilism, for consumer devices, routers, or servers. When any vulnerability is found, it should be remediated within reason (likelihood of exploitation, severity of exploit) and life should go on until the next one is found. That's one of the persistent costs of using technology.

Re:Wireless Charging Power Side-Channel Attacks by ccouzens on Monday September 13, 2021 @08:08AM (#28510451)
Next week on HN:

School teachers able to determine which students have been using their phones in class by looking at battery charge before and after.

Re:Wireless Charging Power Side-Channel Attacks by Scoundreller on Monday September 13, 2021 @08:47AM (#28510800)
Was going to guess it was by microscopic blackouts every second where sensors would detect the source of any light that remains.
Re:Wireless Charging Power Side-Channel Attacks by fragmede on Monday September 13, 2021 @11:10AM (#28512453)
Starting at least several years ago, if not a decade. The security industry has had this policy towards IoT devices before the technology was even cheap enough to mass produce.
Re:Wireless Charging Power Side-Channel Attacks by westurner on Monday September 13, 2021 @01:22PM (#28514125)
> assume the mentality that all consumer devices connected to the internet should be treated as insecure by default.

"Zero trust security model" https://en.wikipedia.org/wiki/Zero_trust_security_model :

> The main concept behind zero trust is that devices should not be trusted by default, even if they are connected to a managed corporate network such as the corporate LAN and even if they were previously verified.