News for hackers. Stuff that matters.
Re:iPhone 15 and iPhone 15 Plus by lucideer on Wednesday September 13, 2023 @06:31AM (#37494867)
Juice jacking tends to use HID emulation - that's feature abuse, not CVE exploitation.

The point is it isn't viable at any scale - nation states advise avoiding public charging because employees of companies they subcontract have been individually targetted. They're not going to be doing any indiscriminate mass exploitation of the general public with it though.

Re:iPhone 15 and iPhone 15 Plus by c0pium on Saturday September 16, 2023 @01:12AM (#37532223)
That’s absurd, no it doesn’t. It refers to a combination of the 2011 defcon demo of eliciting a device to sync data by default and a fever-dream of getting code execution by abusing the USB stack.

You’re thinking of BadUSB or OMGCable.

1) which is a totally different attack 2) not especially applicable to smartphones 3) very much a thing that happens in real life (I have responded to incidents where one was used)

Lastly, there are plenty of CVEs issued for “feature abuse”, that’s a meaningless distinction.