3 ms·

...trust me this is the best USB cord ever try it out for free, ill sell you some cheap if you get a couple friends to buy some. https://shop.hak5.org/products

by rolph 8mo ago

...trust me this is the best USB cord ever try it out for free, ill sell you some cheap if you get a couple friends to buy some. https://shop.hak5.org/products/omg-cable https://shop.hak5.org/products/omg-cable https://phreakboutique.com/blogs/tutorials/using-your-new-evil-usb-cable https://phreakboutique.com/blogs/tutorials/using-your-new-ev... thats how the grift starts...

rkagerer 8mo ago
That's it, I'm going back to parallel port cables for everything now.
- jasongill 8mo ago
  The parallel port (at least in it's later implementations) actually supports DMA - I'm sure that data exfiltration via the parallel port is hard, but probably not impossible... Nothing is safe, unfortunately!
  - toast0 8mo ago
    The parallel port controller can DMA, that lets the driver tell the port hey, send this buffer out to the port and let me know or read this many bytes into this buffer and let me know. It's not peripheral controlled DMA like with firewire or PCI. You can absolutely exfiltrate data via the parallel port... that's why you attach printers or zip disks... it's just that it needs host participation.
  - throwup238 8mo ago
    It’s almost certainly impossible on modern systems. The southbridge which allowed DMA to parallel port was absorbed into PCH and slowly stripped of legacy LCP support by chipset and motherboard manufacturers.
jacquesm 8mo ago
If I were an evil person I would start a cable shop where I sell all kinds of cables. And based on who the customer is I would send them a real cable or one with a nice and free to them surprise extra payload. Who is going to x-ray each and every cable they buy? And who keeps track of where they sourced what cable?
- rolph 8mo ago
  you should tender to NSA. less liability exposure, probably better revenue. there is an interception and controlled delivery often used to get at the big problems. you should never trust a "ground score" if your doing anything bad, it could be a controlled delivery. considering current events i speculate there may be an uptick in this type of security operation. https://www.schneier.com/blog/archives/2014/03/cottonmouth-iii.html https://www.schneier.com/blog/archives/2014/03/cottonmouth-i... https://en.wikipedia.org/wiki/ANT_catalog https://en.wikipedia.org/wiki/ANT_catalog
  - jacquesm 8mo ago
    Fuck the NSA. I did start off with 'If I were an evil person'. If I were an even more evil person I would go to work for the NSA. But no worries, I'm not politically aligned with anything in the USA right now and saw the writing on the wall two decades ago.

by rolph 8mo ago

rkagerer 8mo ago

That's it, I'm going back to parallel port cables for everything now.

jasongill 8mo ago
The parallel port (at least in it's later implementations) actually supports DMA - I'm sure that data exfiltration via the parallel port is hard, but probably not impossible... Nothing is safe, unfortunately!
- toast0 8mo ago
  The parallel port controller can DMA, that lets the driver tell the port hey, send this buffer out to the port and let me know or read this many bytes into this buffer and let me know. It's not peripheral controlled DMA like with firewire or PCI. You can absolutely exfiltrate data via the parallel port... that's why you attach printers or zip disks... it's just that it needs host participation.
- throwup238 8mo ago
  It’s almost certainly impossible on modern systems. The southbridge which allowed DMA to parallel port was absorbed into PCH and slowly stripped of legacy LCP support by chipset and motherboard manufacturers.

jacquesm 8mo ago

If I were an evil person I would start a cable shop where I sell all kinds of cables. And based on who the customer is I would send them a real cable or one with a nice and free to them surprise extra payload. Who is going to x-ray each and every cable they buy? And who keeps track of where they sourced what cable?

rolph 8mo ago
you should tender to NSA. less liability exposure, probably better revenue. there is an interception and controlled delivery often used to get at the big problems. you should never trust a "ground score" if your doing anything bad, it could be a controlled delivery. considering current events i speculate there may be an uptick in this type of security operation. https://www.schneier.com/blog/archives/2014/03/cottonmouth-iii.html https://www.schneier.com/blog/archives/2014/03/cottonmouth-i... https://en.wikipedia.org/wiki/ANT_catalog https://en.wikipedia.org/wiki/ANT_catalog
- jacquesm 8mo ago
  Fuck the NSA. I did start off with 'If I were an evil person'. If I were an even more evil person I would go to work for the NSA. But no worries, I'm not politically aligned with anything in the USA right now and saw the writing on the wall two decades ago.