4 ms·
It opens one new attack vector I think---any exploit targeting an Android phone could be used to deliver a different exploit to the computer the phone is connec
by wzdd 16y ago
It opens one new attack vector I think---any exploit targeting an Android phone could be used to deliver a different exploit to the computer the phone is connected to. Given that this requires a kernel driver (on the phone side), it would have to be pretty great exploit. You would have to be pretty motivated to do this instead of, e.g. sending 1 billion emails with an attached virus.jpg.exe, but it is a new vector.
- stcredzero 16y agoFor penetrating a particular target, this is very interesting. Bribe a repairman into leaving such a device plugged into a developer workstation at a company where everyone goes home at 5 or 6. The device presents itself as a USB hub, then waits until late at night, when it connects its keyboard and types out and compiles an entire rootkit. This would even work at companies which lock down USB ports against removable drives. Better yet, the device could act as an attacker's remote shell by downloading commands using curl and uploading redirected stdout and stderr.
- dalore 16y agoWouldn't the computer be auto locked? It's going to have to type out the password.
- JonnieCache 16y ago>The device presents itself as a USB hub, then waits until late at night, when it connects its keyboard and types out and compiles an entire rootkit. This idea is terrifying.
- neworbit 16y agoYou'd presumably have to be in a shell (or compiler window) and on a system that didn't lock itself - but yeah, yikes. How are you with centrifuges?
- stcredzero 16y agoYou can bring up a command line with just the keyboard, even in Windows. The lock would be a problem.