News for hackers. Stuff that matters.
Re:The Google plasma globe affair of 2012 by CamperBob2 on Monday October 10, 2022 @01:02PM (#33153834)
The other nifty thing about the plasma globe is that immediately after someone plugs it in, they are likely to be too distracted by the luminous fingers of writhing plasma to notice the shell window popping up briefly on the monitor. Nicely-executed hack on multiple levels.

For the same reason, waiting a few minutes to pop up the shell, as the article says they did, actually seems counterproductive. It might have been better to pop up the window intentionally -- launch the browser to display an ad from the company that made the gadget, maybe, or a 'user's manual', or something like that. Something that would appear innocuous and expected, while providing cover for the payload.

Re:The Google plasma globe affair of 2012 by jaywalk on Monday October 10, 2022 @01:37PM (#33154207)
A power user wouldn't (shouldn't) expect a device merely using USB for power to pop up anything on the PC it's plugged into. That would be a dead giveaway that it's doing something it shouldn't be doing.
Re:The Google plasma globe affair of 2012 by CamperBob2 on Monday October 10, 2022 @01:55PM (#33154423)
I think that train left the station when they plugged a 50,000-volt EMI generator into an USB jack. :)
Re:The Google plasma globe affair of 2012 by wil421 on Monday October 10, 2022 @02:47PM (#33155062)
I’m pretty desensitized to window’s CMD prompts popping up when I install a program or plug in a device. My Razer keyboard even installs borderline malware when you plug it in.

However, if this happened on my Mac I would immediately be skeptical.

Re:The Google plasma globe affair of 2012 by tomcam on Monday October 10, 2022 @04:00PM (#33155793)
> My Razer keyboard even installs borderline malware

What does the software do? I assume it asks for permission and you decline? In a couple of decades of buying USB keyboards I have never let one install software and I have never noticed any problems.

Re:The Google plasma globe affair of 2012 by maxsilver on Monday October 10, 2022 @04:38PM (#33156139)
Razer Keyboards and Devices auto-install weird proprietary "drivers" (borderline adware), and the software they auto-install also used to give anyone root/admin privileges (borderline malware) - https://www.engadget.com/razer-mouse-windows-10-security-vul... as an example
Re:The Google plasma globe affair of 2012 by hoseja on Tuesday October 11, 2022 @06:45AM (#33161690)
Sometimes these crapware "drivers" are actually required for full functionality of the hardware, like assigning keys, macros, profile switching, etc...
Re:The Google plasma globe affair of 2012 by tomcam on Tuesday October 11, 2022 @03:50PM (#33168371)
Very good point, which is why I never even bothered to check what was advertised. I simply did not want to require anything beyond a driver that would probably go out of date anyway
Re:The Google plasma globe affair of 2012 by LtWorf on Monday October 10, 2022 @04:26PM (#33156033)
They make me pretty nervous on windows too… but it's windows so I don't know enough to presume for sure I'm infected or it's just windows.
Re:The Google plasma globe affair of 2012 by nullc on Tuesday October 11, 2022 @12:29AM (#33159533)
Plasma globe is also nice because it's so big. It could contain a camera, microphone, storage, LTE radio, GPS (for only turning malicious at the target location) ... a tiny drone that could be ejected at night to fly around the office.