3 ms·

My opinion is that the Amazon threat vector is overblown. This cable is better suited for inside attackers (friends & family) or for highly targeted attacks. A

My opinion is that the Amazon threat vector is overblown. This cable is better suited for inside attackers (friends & family) or for highly targeted attacks. Amazon reviewers would quickly notice terminal windows pop up on their screens or keystrokes happening at inopportune times, assuming a more advanced exploit isn’t used. (many of these attacks simply try to spawn a terminal window and type commands, a very noisy approach) Scary device regardless, I just think the Amazon vector is overhyped. If you are a high value target, pay close attention to your supply chain and how you receive packages.

okmokmz 7y ago
>Amazon reviewers would quickly notice terminal windows pop up on their screens or keystrokes happening at inopportune times Back in the day sure, but with the way amazon works now I don't think this would be the case. I stopped purchasing items from amazon because one of the things they do is lump "like" or "same" items and reviews together, the only problem is sometimes the items are actually completely different. I've bough electronics, components, cables, and other items from amazon before and then received a similar item but from a completely different brand, manufacturer, seller, etc. When I went back to look at reviews they are all lumped under one page of amazon so you can't get details about a particular product. You can order a cable on a page that's called "apple lightning cable" with reviews for legitimate products but then receive a cheap lightning cable from china with no way to leave a review for that particular product. One way I've found of identifying pages like this is by examining pictures that people upload in reviews, and many times you'll find a variety of products being reviewed/received.