Ramblings

Introspective narcissism since the 2000s.

User Tools

Site Tools


juice_jacking

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
juice_jacking [2026/10/16 10:10] – ultracomfyjuice_jacking [2026/10/16 10:20] (current) – ultracomfy
Line 33: Line 33:
 </WRAP> </WRAP>
  
-There are products sold online that are meant to mitigate the risk of infection from public charging ports. These devices often come in the form of USB cables with the data transfer pins removed, making it physically impossible to transfer any data.+There are products sold online that are meant to mitigate the risk of infection from public charging ports. These devices often come in the form of USB cables or adapters with the data transfer pins removed, making it physically impossible to transfer any data. The benefit of this approach is that it sets the risk of being targeted by an attack to zero. The problem is that this comes from people who think that this meaningfully increases their cybersecurity.
  
-Phones receive information from the outside world in several ways. One is through electrical signals sent over a USB cable, where changes in voltage encode data. Another is through radio waves, which the phone's wireless hardware receives and interprets as data. In both cases, the device's hardware and software determine how incoming information is processed and what it is allowed to do.+For a comparison, it is useful to know that phones receive information from the outside world in several ways. One is through electrical signals sent over a USB cable, where changes in voltage encode data. Another is through radio waves, which the phone's wireless hardware receives and interprets as data. In both cases, the device's hardware and software determine how incoming information is processed and what it is allowed to do.
  
-Neither interface is inherently immune to malicious input. Vulnerabilities in the code that processes incoming data can theoretically be exploited, whether that data arrives through a cable or wirelessly((Disabling WiFi and Bluetooth, and turning on Airplane mode reduces exposure, but doesn't fully stop data processing either.)). But unlike data blocking USB cables, we do not store phones in Faraday cages, because the risk of actually being targeted that way for an ordinary end user is extremely low (though examples of past attacks like this do exist). The point here is that attacks like this exist //theoretically//, but theoretical attacks should not be conflated with attacks that reasonably happen in the real world.+Neither interface is inherently immune to malicious input. Vulnerabilities in the code that processes incoming data can theoretically be exploited, whether that data arrives through a cable or wirelessly((Disabling WiFi and Bluetooth, and turning on Airplane mode reduces exposure, but doesn't fully stop data processing either.)). But unlike data blocking USB cables, we do not store phones in Faraday cages, because the risk of actually being targeted that way for an ordinary end user is extremely low (though examples of past attacks like this do indeed exist!). The point here is that attacks like this exist //theoretically//, but theoretical attacks should not be conflated with attacks that can reasonably happen in the real world.
juice_jacking.txt · Last modified: by ultracomfy

Donate Powered by PHP Valid HTML5 Valid CSS Driven by DokuWiki