3 ms·

Very nice. I am wondering -- why have a devboard this small?

rolph 7mo ago
...trust me this is the best USB cord ever try it out for free, ill sell you some cheap if you get a couple friends to buy some. https://shop.hak5.org/products/omg-cable https://shop.hak5.org/products/omg-cable https://phreakboutique.com/blogs/tutorials/using-your-new-evil-usb-cable https://phreakboutique.com/blogs/tutorials/using-your-new-ev... thats how the grift starts...
- rkagerer 7mo ago
  That's it, I'm going back to parallel port cables for everything now.
  - jasongill 7mo ago
    The parallel port (at least in it's later implementations) actually supports DMA - I'm sure that data exfiltration via the parallel port is hard, but probably not impossible... Nothing is safe, unfortunately!
    - toast0 7mo ago
      The parallel port controller can DMA, that lets the driver tell the port hey, send this buffer out to the port and let me know or read this many bytes into this buffer and let me know. It's not peripheral controlled DMA like with firewire or PCI. You can absolutely exfiltrate data via the parallel port... that's why you attach printers or zip disks... it's just that it needs host participation.
    - throwup238 7mo ago
      It’s almost certainly impossible on modern systems. The southbridge which allowed DMA to parallel port was absorbed into PCH and slowly stripped of legacy LCP support by chipset and motherboard manufacturers.
- jacquesm 7mo ago
  If I were an evil person I would start a cable shop where I sell all kinds of cables. And based on who the customer is I would send them a real cable or one with a nice and free to them surprise extra payload. Who is going to x-ray each and every cable they buy? And who keeps track of where they sourced what cable?
  - rolph 7mo ago
    you should tender to NSA. less liability exposure, probably better revenue. there is an interception and controlled delivery often used to get at the big problems. you should never trust a "ground score" if your doing anything bad, it could be a controlled delivery. considering current events i speculate there may be an uptick in this type of security operation. https://www.schneier.com/blog/archives/2014/03/cottonmouth-iii.html https://www.schneier.com/blog/archives/2014/03/cottonmouth-i... https://en.wikipedia.org/wiki/ANT_catalog https://en.wikipedia.org/wiki/ANT_catalog
    - jacquesm 7mo ago
      Fuck the NSA. I did start off with 'If I were an evil person'. If I were an even more evil person I would go to work for the NSA. But no worries, I'm not politically aligned with anything in the USA right now and saw the writing on the wall two decades ago.

rolph 7mo ago

...trust me this is the best USB cord ever try it out for free, ill sell you some cheap if you get a couple friends to buy some. https://shop.hak5.org/products/omg-cable https://shop.hak5.org/products/omg-cable https://phreakboutique.com/blogs/tutorials/using-your-new-evil-usb-cable https://phreakboutique.com/blogs/tutorials/using-your-new-ev... thats how the grift starts...

rkagerer 7mo ago
That's it, I'm going back to parallel port cables for everything now.
- jasongill 7mo ago
  The parallel port (at least in it's later implementations) actually supports DMA - I'm sure that data exfiltration via the parallel port is hard, but probably not impossible... Nothing is safe, unfortunately!
  - toast0 7mo ago
    The parallel port controller can DMA, that lets the driver tell the port hey, send this buffer out to the port and let me know or read this many bytes into this buffer and let me know. It's not peripheral controlled DMA like with firewire or PCI. You can absolutely exfiltrate data via the parallel port... that's why you attach printers or zip disks... it's just that it needs host participation.
  - throwup238 7mo ago
    It’s almost certainly impossible on modern systems. The southbridge which allowed DMA to parallel port was absorbed into PCH and slowly stripped of legacy LCP support by chipset and motherboard manufacturers.
jacquesm 7mo ago
If I were an evil person I would start a cable shop where I sell all kinds of cables. And based on who the customer is I would send them a real cable or one with a nice and free to them surprise extra payload. Who is going to x-ray each and every cable they buy? And who keeps track of where they sourced what cable?
- rolph 7mo ago
  you should tender to NSA. less liability exposure, probably better revenue. there is an interception and controlled delivery often used to get at the big problems. you should never trust a "ground score" if your doing anything bad, it could be a controlled delivery. considering current events i speculate there may be an uptick in this type of security operation. https://www.schneier.com/blog/archives/2014/03/cottonmouth-iii.html https://www.schneier.com/blog/archives/2014/03/cottonmouth-i... https://en.wikipedia.org/wiki/ANT_catalog https://en.wikipedia.org/wiki/ANT_catalog
  - jacquesm 7mo ago
    Fuck the NSA. I did start off with 'If I were an evil person'. If I were an even more evil person I would go to work for the NSA. But no worries, I'm not politically aligned with anything in the USA right now and saw the writing on the wall two decades ago.