2 ms·
This article is full of contradictory information. > it’s likely that viable juice jacking attacks are possible, but they’re largely out of reach for the vast
by deafpolygon 4y ago
This article is full of contradictory information.
> it’s likely that viable juice jacking attacks are possible, but they’re largely out of reach for the vast majority of hackers
When is hacking such a specialized thing when there are tons of instructions on the darknet for these type of things?
> There are some major limitations, however, that make the O.MG Cable and similar hacking tools unsuitable for the kind of opportunistic juice jacking the FCC and FBI warnings envision. First, the script must be tailored to the specific model of hardware being attacked.
So target the largest common denominator? Even just 5 out of 1000 individuals compromised is a "good day", slurp up that data and sell on the darknet.
> That means it’s infeasible, if not impossible, to create a malicious charging station that could hack more than a very small number of phones in use today.
But a small number is some number. It doesn't matter if it's infeasible, just that it's possible. Target the largest base case - this being the Samsung Galaxies and specific iPhone/iOS versions.
> Additionally, the O.MG cable works only on Apple devices equipped with a USB-C connector.
Android, laptops, etc. Still viable attack vectors. As more and more devices move to USB-C (thanks to the EU) and more devices becoming slimmer - these charging stations are going to look like attractive targets. Surface Pro is now USB-C, and a number of laptops charge via USB-C.
> They create unneeded anxiety and inconvenience that run the risk of people simply giving up trying to be secure.
This is the "low hanging fruit". By conditioning the public to avoid these , they can eliminate this kind of attack almost entirely. It's kind of how we eliminated a large body of diseases by teaching people to wash their hands when they come and go from places. Good hygiene is still good hygiene.
I feel like Ars journalist want people to fall victim to these, just so they can write easy articles.