Re:The Google plasma globe affair of 2012
by jaywalk on Monday October 10, 2022 @01:37PM
(#33154207)
A power user wouldn't (shouldn't) expect a device merely using USB for power to pop up anything on the PC it's plugged into. That would be a dead giveaway that it's doing something it shouldn't be doing.
Re:The Google plasma globe affair of 2012
by CamperBob2 on Monday October 10, 2022 @01:55PM
(#33154423)
I think that train left the station when they plugged a 50,000-volt EMI generator into an USB jack. :)
I’m pretty desensitized to window’s CMD prompts popping up when I install a program or plug in a device. My Razer keyboard even installs borderline malware when you plug it in.
However, if this happened on my Mac I would immediately be skeptical.
> My Razer keyboard even installs borderline malware
What does the software do? I assume it asks for permission and you decline? In a couple of decades of buying USB keyboards I have never let one install software and I have never noticed any problems.
Re:The Google plasma globe affair of 2012
by maxsilver on Monday October 10, 2022 @04:38PM
(#33156139)
Razer Keyboards and Devices auto-install weird proprietary "drivers" (borderline adware), and the software they auto-install also used to give anyone root/admin privileges (borderline malware) - https://www.engadget.com/razer-mouse-windows-10-security-vul... as an example
Re:The Google plasma globe affair of 2012
by hoseja on Tuesday October 11, 2022 @06:45AM
(#33161690)
Sometimes these crapware "drivers" are actually required for full functionality of the hardware, like assigning keys, macros, profile switching, etc...
Re:The Google plasma globe affair of 2012
by tomcam on Tuesday October 11, 2022 @03:50PM
(#33168371)
Very good point, which is why I never even bothered to check what was advertised. I simply did not want to require anything beyond a driver that would probably go out of date anyway
They make me pretty nervous on windows too… but it's windows so I don't know enough to presume for sure I'm infected or it's just windows.
Plasma globe is also nice because it's so big. It could contain a camera, microphone, storage, LTE radio, GPS (for only turning malicious at the target location) ... a tiny drone that could be ejected at night to fly around the office.
For the same reason, waiting a few minutes to pop up the shell, as the article says they did, actually seems counterproductive. It might have been better to pop up the window intentionally -- launch the browser to display an ad from the company that made the gadget, maybe, or a 'user's manual', or something like that. Something that would appear innocuous and expected, while providing cover for the payload.