3 ms·

Just to be clear, Are you saying that there are no unfixed exploits in the USB stack ?

• misnome 3y ago
  That would be the possibility of zero-day they explicitly mentioned.
  • worthless-trash 3y ago
    No, OP refers to the charging function. I'm calling out the USB stack these are different things. Maybe this discussion is too nuanced for HN. Best we just tow the line, and agree that phishing and websploits is the biggest problem and other issues are not worth addressing even when we can.
• cvccvroomvroom 3y ago
  USB is just the tip of the iceberg at the bottom of the stack. It's possible to restore and synchronize contents to and from Apple and Android phones to a computer over USB. The attack surface is therefore the OS and applications as well as the hardware including firmware of chips.
  • jon-wood 3y ago
    But doing so, at least on an Apple device, requires me to explicitly say I trust the USB port I’ve plugged in to. Maybe some people would do that, but I’m sure as hell not going to blindly approve that when charging my phone on the bus.
    • hju22_-3 3y ago
      Until a zero-day happens.