4 ms·

The USB-IF publishes a list of member companies[1]; purchase products from these qualified manufacturers, and perhaps more importantly, from authorized distribu

The USB-IF publishes a list of member companies[1]; purchase products from these qualified manufacturers, and perhaps more importantly, from authorized distributors. This is a good enough "policy control" for the average consumer. [1] https://www.usb.org/members https://www.usb.org/members

pbronez 2y ago
Surprised that Anker isn’t obviously on there.
- mceachen 2y ago
  Unsurprising considering Anker doesn’t pay for basic UL listing for many of their AC power taps.
  - user_7832 2y ago
    Also at least some of their products are just ODM rebrands. A bit disappointing but probably shouldn't have been surprised.
- metaphor 2y ago
  It appears Anker Innovations Ltd was last listed[1] circa 2020 under VID 10522 (0x291A). Tread with caution...the prospects of zombie grift tend to be real when brand recognition is established. [1] https://usb.org/sites/default/files/vendor_ids051920_0.pdf https://usb.org/sites/default/files/vendor_ids051920_0.pdf
k8svet 2y ago
Erm. I fail to see how this moves the needle unless usb-if is doing extreme firmware level source analysis and deterministic compiles and checking them against shipped firmware. Which I doubt is happening, with every atom in my body.
- metaphor 2y ago
  It's a policy control suggestion that's both low effort and immediately actionable by the typical tech-literate types sleuthing these channels. When baseline consumer behavior is sort-by-price-low-to-high and select the cheapest item from random pop-up white label chinesium third-party vendor on Amazon, exercising an ounce of supply chain due diligence where none previously existed can go a long way. To be sure, if you think you can economically defend against a coordinated supply chain attack by a speculative adversary willing to pony up real capital operating an otherwise legitimate facade for years building market goodwill only to burn it all down in one shot against a single worthwhile target...well, I've got a bridge to sell you.
deleted 2y ago
[deleted]

pbronez 2y ago

Surprised that Anker isn’t obviously on there.

mceachen 2y ago
Unsurprising considering Anker doesn’t pay for basic UL listing for many of their AC power taps.
- user_7832 2y ago
  Also at least some of their products are just ODM rebrands. A bit disappointing but probably shouldn't have been surprised.
metaphor 2y ago
It appears Anker Innovations Ltd was last listed[1] circa 2020 under VID 10522 (0x291A). Tread with caution...the prospects of zombie grift tend to be real when brand recognition is established. [1] https://usb.org/sites/default/files/vendor_ids051920_0.pdf https://usb.org/sites/default/files/vendor_ids051920_0.pdf

k8svet 2y ago

Erm. I fail to see how this moves the needle unless usb-if is doing extreme firmware level source analysis and deterministic compiles and checking them against shipped firmware. Which I doubt is happening, with every atom in my body.

metaphor 2y ago
It's a policy control suggestion that's both low effort and immediately actionable by the typical tech-literate types sleuthing these channels. When baseline consumer behavior is sort-by-price-low-to-high and select the cheapest item from random pop-up white label chinesium third-party vendor on Amazon, exercising an ounce of supply chain due diligence where none previously existed can go a long way. To be sure, if you think you can economically defend against a coordinated supply chain attack by a speculative adversary willing to pony up real capital operating an otherwise legitimate facade for years building market goodwill only to burn it all down in one shot against a single worthwhile target...well, I've got a bridge to sell you.

deleted 2y ago

[deleted]