4 ms·

Plugging your phone or laptop into a random usb slot into a wall to charge it isn't safe from a security standpoint. Since data flows with power, it is very eas

Plugging your phone or laptop into a random usb slot into a wall to charge it isn't safe from a security standpoint. Since data flows with power, it is very easy to load up some malware while charging or steal data from the device. Unless I am misunderstood about what the article is proposing. It would be a nightmare if the only way I could charge my phone was to plug it into rouge usb ports. It is a security nightmare. it isn't like this is some sort of far off concept. http://www.nbcnews.com/id/44038933/ns/technology_and_science-security/t/small-usb-devices-can-do-some-big-time-damage/ http://www.nbcnews.com/id/44038933/ns/technology_and_science...

tomswartz07 12y ago
I haven't seen the specs of the Type C, but all of today's generation of USB cables can be modified to be 'power only' - Pins 1 and 4 of almost all USB cables are +5V and Gnd, respectively. It wouldn't be a stretch to get a cable with pins 2 & 3 disabled or snipped if you're that security concious. :)
- UrMomReadsHN 12y ago
  Right, you can buy them now. I just mean if it becomes required/acceptable to plug in all your devices whenever you see a usb port, we WILL start seeing malware transmitted that way. These things should be thought of ahead of time.
  - tomswartz07 12y ago
    FWIW, Apple's universal connector doesn't have this security lockout feature either. The data could potentially be stolen via their solution as well. Honestly, I agree- there needs to be a serious discussion about how physical security could be implemented with all connections of this type.
    - UrMomReadsHN 12y ago
      Apple's charger has already been compromised. http://www.theguardian.com/media-network/partner-zone-infosecurity/apple-charger-iphone-ipad-security-malware http://www.theguardian.com/media-network/partner-zone-infose... (I think they have issued a fix for this since)
    - deleted 12y ago
      [deleted]
  - organsnyder 12y ago
    Isn't that already occurring with Type A connectors? I've seen them cropping up all over the place, including in public areas.
- adestefan 12y ago
  So you end up needing a special cable or a special port which just kills the notional of a universal port/cable.
  - tomswartz07 12y ago
    Well, two cables - one for 'just power' and one for power+data. I'd be fine carrying two small USB cables around.
    - UrMomReadsHN 12y ago
      The average user isn't going to know the difference.
    - crdoconnor 12y ago
      One cable with a small switch would be sufficient.
organsnyder 12y ago
Perhaps we need to reconsider the trustworthiness of unknown devices connected via USB. A simple "xxx device connected—allow?" prompt could suffice.
ferrari8608 12y ago
https://lockedusb.com/ https://lockedusb.com/ There are now adapters available for USB which will not allow a data connection. I'm sure it won't be long before these are made for Type C as well.

tomswartz07 12y ago

I haven't seen the specs of the Type C, but all of today's generation of USB cables can be modified to be 'power only' - Pins 1 and 4 of almost all USB cables are +5V and Gnd, respectively. It wouldn't be a stretch to get a cable with pins 2 & 3 disabled or snipped if you're that security concious. :)

UrMomReadsHN 12y ago
Right, you can buy them now. I just mean if it becomes required/acceptable to plug in all your devices whenever you see a usb port, we WILL start seeing malware transmitted that way. These things should be thought of ahead of time.
- tomswartz07 12y ago
  FWIW, Apple's universal connector doesn't have this security lockout feature either. The data could potentially be stolen via their solution as well. Honestly, I agree- there needs to be a serious discussion about how physical security could be implemented with all connections of this type.
  - UrMomReadsHN 12y ago
    Apple's charger has already been compromised. http://www.theguardian.com/media-network/partner-zone-infosecurity/apple-charger-iphone-ipad-security-malware http://www.theguardian.com/media-network/partner-zone-infose... (I think they have issued a fix for this since)
  - deleted 12y ago
    [deleted]
- organsnyder 12y ago
  Isn't that already occurring with Type A connectors? I've seen them cropping up all over the place, including in public areas.
adestefan 12y ago
So you end up needing a special cable or a special port which just kills the notional of a universal port/cable.
- tomswartz07 12y ago
  Well, two cables - one for 'just power' and one for power+data. I'd be fine carrying two small USB cables around.
  - UrMomReadsHN 12y ago
    The average user isn't going to know the difference.
  - crdoconnor 12y ago
    One cable with a small switch would be sufficient.

organsnyder 12y ago

Perhaps we need to reconsider the trustworthiness of unknown devices connected via USB. A simple "xxx device connected—allow?" prompt could suffice.

ferrari8608 12y ago

https://lockedusb.com/ https://lockedusb.com/ There are now adapters available for USB which will not allow a data connection. I'm sure it won't be long before these are made for Type C as well.