3 ms·
Juice jacking tends to use HID emulation - that's feature abuse, not CVE exploitation. The point is it isn't viable at any scale - nation states advise avoidin
by lucideer 3y ago
Juice jacking tends to use HID emulation - that's feature abuse, not CVE exploitation.
The point is it isn't viable at any scale - nation states advise avoiding public charging because employees of companies they subcontract have been individually targetted. They're not going to be doing any indiscriminate mass exploitation of the general public with it though.
- c0pium 3y agoThat’s absurd, no it doesn’t. It refers to a combination of the 2011 defcon demo of eliciting a device to sync data by default and a fever-dream of getting code execution by abusing the USB stack. You’re thinking of BadUSB or OMGCable. 1) which is a totally different attack 2) not especially applicable to smartphones 3) very much a thing that happens in real life (I have responded to incidents where one was used) Lastly, there are plenty of CVEs issued for “feature abuse”, that’s a meaningless distinction.