4 ms·

Headline just reminded me to disable USB debugging. Though I wonder how many exploits are available for more modern Android phones. Between USB debugging author

Headline just reminded me to disable USB debugging. Though I wonder how many exploits are available for more modern Android phones. Between USB debugging authorising the host, and the "Use USB for charging" option, how much space is left for this? I'll still be attempting to use my own chargers though.

ShorsHammer 7y ago
> how much space is left for this Why would a bad actor bother searching for greener pastures? https://www.shodan.io/search?query=android+debug+bridge https://www.shodan.io/search?query=android+debug+bridge
- rkachowski 7y ago
  but adb has to be explicitly enabled through developer options hidden in the about phone settings of the device. Even then an explicit trust must be authorized between the adb server and device, via a dialog displayed upon the screen (containing the fingerprint of the server). Both Android and iOS have protections against this kind of attack, I would be really interested to hear the technical nature of how these work - either there is some bizarrely widespread 0 day exploit in all these chargers, this attack primarily affects old devices, or this article is primarily bait.
  - ShorsHammer 7y ago
    Some devices ship with it turned on by default, this was prominent a year ago, it's horrendous and still very real. https://www.bleepingcomputer.com/news/security/tens-of-thousands-of-android-devices-are-exposing-their-debug-port/ https://www.bleepingcomputer.com/news/security/tens-of-thous...