Plugging into a random usb port is bad security
this post was submitted on 27 Sep 2024
770 points (94.3% liked)
Microblog Memes
6027 readers
1882 users here now
A place to share screenshots of Microblog posts, whether from Mastodon, tumblr, ~~Twitter~~ X, KBin, Threads or elsewhere.
Created as an evolution of White People Twitter and other tweet-capture subreddits.
Rules:
- Please put at least one word relevant to the post in the post title.
- Be nice.
- No advertising, brand promotion or guerilla marketing.
- Posters are encouraged to link to the toot or tweet etc in the description of posts.
Related communities:
founded 1 year ago
MODERATORS
Not really bad if you use a power-only cable. If the data pins aren't even wired up, can't move anything other than power.
Not sure if that works with USB-C at anything other than legacy 500mA power draw though, probably not since the device can't communicate for what it supports.
If your device has good software, it will only allow power unless you authorize a data connection.
* Assuming there is no bug, zero-day, or other vulnerability on the current version of your fully updated device.
Having a power-only cable removes that as a possibility.
Still gotta worry about stuff that could send a ton of current to fry the ports too. USB condoms can help here too but your own power adapter is best.
Ton of voltage. You push voltage and pull current.
I only push imperial current electron flow style.
load more comments
(1 replies)
Now if only usb cables were labeled like Ethernet cables.
It amazes me how given the complexity of the USB specifications, where everything looks the same but it is not the same, nothing is ever labeled.
Some things are but the labelling is stupid and tiny. Many laptop ports are labeled but people aren't familiar with the icons (and the icons are often confusingly similar)
Well--to bring it back to the security point, you can't trust the icon on the port anyway. You need a well-labeled cable, and, good luck
load more comments
(1 replies)
A power only USB-C cable is a violation of USB spec, has to be USB 2.0 at the least.
load more comments
(1 replies)
With this arrangement, they probably can't steal your data. But they can absolutely destroy your phone with a string electric shock, if that's the sort of malicious plan they have.
load more comments
(1 replies)
There has never been a proven case of juice jacking, anywhere, ever.
But I have seen multiple phones get harmed by a really bad charger. Although these chargers were not for public use.
Still, it's not a bad idea to bring a power bank. And then charge that, if you need to.
load more comments
(3 replies)
That's what USB-A to USB-C cables are for. Most of those outlets don't provide any fast charging anyway.
Faster than nothing at all tho
So you plug an A to C cable into them (or hang an A to C dongle off the end of your usual cable) and charge from them.
I still run across them that charge at 1.0 speeds. I'm pretty sure if my phone isn't turned off they can't actually keep my phone from dying at idle.
load more comments
(2 replies)
load more comments
(15 replies)
Has this guy somehow not learned of type A to type C cables?
It's not so much the connector; but the power delivery standard.
Type A maxes out at 5v 3a = 15w and is often limited closer to 5v 1a = 5w for public-use charging ports.
Type C and its power delivery standards can get as high as 50v 5a = 250w (though usually closer to 20v 5a = 100w)
Then again.... The negotiation for what voltage/amperage to supply happens over the data lines which you don't want connected on a public charging port...
I dont really see a good solution here.
load more comments
(4 replies)
The same could be said about power adapters
load more comments
(1 replies)
Idk. Like all the usb ports were capped at like 5v 1a with shorted data lines. I always used my own charger just because it would take 6 hours to charge my phone using the built in usb plug.
This is why next to my couches are multi-port chargers.
The ones I'm using currently have 8 ports; 2 at 65W, 3 at 30W, and 3 at 20W. The 30 & 60 are USB-C, 20W is USB A. The 65W is plenty for laptops, tablets, and phones. 30W for tablets and phones if the 65W is in use or headphones, eBook reader, etc. 20W for all that miscellaneous simple device charging, anything micro USB, etc.
Way better strategy than built in IMO. Easy to replace, old one goes somewhere else (or given to family members), etc.
Takes forever to bring the charge up; but perfect for maintaining battery while you watch/scroll on trips.
load more comments
(1 replies)
load more comments
(1 replies)
I still see these in the gym!
I was looking to book a hotel recently and one of the hotels listed "Every room equipped with iHome radio dock" as an amenity.
What year is it?!
I still rock an old iPod. At a gym I’d imagine it’s more for those than phones at this point.
As an anarchist I'm so glad we also made the word universal useless by making all kinds of different power and data transmit standards that ports and cables may or may not support. As a Satanist I also love that there is no system for labeling anything to know what cable will support what protocol.
We do, we just decided not to label anything.
That's why USB ports are always worse than a proper outlet. Just take your charging brick with you, what's the problem?
travels internationally
You've got to start traveling with one of these bad boys:
When you're advanced, you carry two: one powers your stuff, and the other is for your karaoke machine.
load more comments
(2 replies)
Chargers are almost always compatible with any a/c voltage and only need a physical adapter to plug into a wall socket in a different country. Or bring a power bank with you
load more comments
(1 replies)
USB ports on a wall outlet or power strip are usually much more space efficient than a charging brick.
They're also much less capable though. Have fun finding a USB-C PD port anywhere when you need to charge your laptop - a power outlet is much more useful.
load more comments
(1 replies)
load more comments
(4 replies)
load more comments
(7 replies)
Yeah. This is the problem with trying to enforce standards on industries that historically move at glacier speed, with standards used by tech moving at breakneck speeds.
The only happy part of USB-C in this context is that, at least right now, the USB-C connector doesn't seem to be going anywhere anytime soon, so if things get updated to USB C, we should be okay for a while.
Personally, I carry a whole assortment of USB cables with me everywhere. C-to-C, A-to-C, even A-to-lightning, and A-to-microB. I don't use an iPhone, nevermind one that needs a lightning cable. And I have moved away from most accessories that require micro.
I also have a power brick in my pack with the cables, it's a GaN power brick from Anker, with over 100W of output, two USB-C outputs, and one USB-A. At least one of the type C ports supports enough power output to charge my laptop, the other USB C port for my phone, and the USB A port for anything else that might need it. I don't recall the exact power capacity of it, but if memory serves, it will take 100-240V, 50-60hz AC input, so at most, I just need to get one of those cheap converters for the receptacle type used wherever I may find myself.
I work in tech, so being without power is a huge problem. My work laptop also takes USB C for charging, so I don't need to have two power bricks with me. I usually have both, but I don't need to have both.
As long as there's power available and is sufficiently clean and stable, I'm good. I have a few accessories that are not USB C compliant, some have USB C ports but won't trigger a proper USB C charger to deliver any power, which is why I have USB A to C cables, and there's two devices I have that uses a proprietary cable (a Bluetooth headset and my smart watch), which I've obtained spares for which I keep one charging cable at home and one in my kit. My kit also includes a USB A/C power bank. It's not powerful enough to charge my laptop, but it's fine for everything else.
USB C has simplified the cables I carry. I still have a few odds and ends for edge cases, but for the most part, I'm okay with it.
My only big issue with USB C at this point is that it's not just for power+usb data anymore. It's thunderbolt, and display port, and... Ugh. So many things using the same connector that I don't know what will work anymore when I get to a new device, because though it looks like USB C, it might be USB C QC, or PD, or thunderbolt, or display port, or....... FML.
USB-A ports have been outdated since at least 2017, when it started seeing very widespread use. It's everyone else that's late
load more comments
(1 replies)
I have a piece of furniture with a snap in power station and it probably has USB 1.0 ports on it. I don't care how cool the tech is, if you're trying to incorporate it into a long lasting product like furniture, it really needs to be a standard module that is easy to upgrade. Mine snaps out but I have no idea if an updated version exists anywhere because there's no standardization and this furniture company doesn't show anything on their website.
load more comments
(2 replies)
USB A to C is pretty standard
rented a car a couple weeks ago. it didn't have usb-a OR a lighter outlet-- had to go buy usb-c to usb-c cables
incidentally, if you're in the market for a new car, don't buy a mazda cx30. and not even for the usb issue, it just all-around sucks
load more comments
(3 replies)
I thought usb-a to usb-c or whatever you have is standart everywhere what do they mean by useless?
I never used any public ports. Reality is if i have a cable with me, I'm just as likely to have a power bank, and it charges my phone faster. It also gives me more freedom of movement as I don't have to be wired to a wall.
view more: next ›