4 ms·
The person you are responding to is saying authorization isn’t always needed if they are exploiting a vulnerability. The fact that you allow a data connection
by ratg13 4y ago
The person you are responding to is saying authorization isn’t always needed if they are exploiting a vulnerability.
The fact that you allow a data connection may be enough to zero-click you.
It’s like putting your computer on the internet and opening ports.
You might think you are fine if you are up-to-date, but the reality is we don’t know about all of the current vulnerabilities and potential buffer overflows until much later.
- mr_mitm 4y agoThe person I responded to appeared to be confused that they never had to authorize a charger; I explained why that would be to be expected. If what you said is indeed what they meant, then I'd respond that warning the general public of airport charging stations that have been tampered with by some powerful organization potentially burning 0days on randos is a tad overblown.