Differences

This shows you the differences between two versions of the page.

--- juice_jacking [2026/10/15 09:04] – ultracomfy
+++ juice_jacking [2026/10/16 10:20] (current) – ultracomfy
@@ Line 1: / Line 1: @@
 ~~NOTOC~~
-<WRAP column 20% right>
+<WRAP column 18% right>
 {{page>Templates:Secularization}}\\
 {{page>Templates:Science}}
@@ Line 10: / Line 10: @@
 <fs xx-large>Juice Jacking</fs></WRAP>
-Juice jacking is a theoretical type of compromise of devices like smartphones and tablets which use the same cable for charging and data transfer, typically a USB cable. The goal of the attack is to either install malware on the device, or to surreptitiously copy potentially sensitive data.
+Juice jacking is a theoretical type of compromise of devices like smartphones and tablets which use the same cable for charging and data transfer, typically a USB cable. The goal of the attack is to either install malware on the device, or to surreptitiously copy potentially sensitive data. Allowing data transfer between the phone and whatever it is connected to can expose it to bad actors. The phone uses quite a bit of logic for USB communication and if any of that has a vulnerability that allows, for example, for remote code execution, this could be used to compromise the phone.
-Allowing data transfer between the phone and whatever it is connected to can expose it to bad actors. The phone uses quite a bit of logic for USB communication and if any of that has a vulnerability that allows, for example, for remote code execution, this could be used to compromise the phone. However, USB implementations in smartphones are widely deployed and are maintained by a lot of people for many years. While the risk of course is never zero, there is very little publicly documented evidence of widespread, opportunistic juice-jacking attacks against ordinary users (assuming the device is reasonably modern and up-to-date). Anyone who were to find such an exploit would not waste it on indiscriminately harvesting data of random public utility users. An exploit letting you freely access any significant number of phones (probably depending on OS, chipset, etc.) is the kind of stuff nation state actors dream of and would use on big, valuable targets. Spying on other nations, digging out megacorporations, a vulnerability like this is not worth deploying on a few random public charging stations for funs where it might get found.
+However, USB implementations in smartphones are widely deployed and are maintained by a lot of people for many years. While the risk of course is never zero, there is very little publicly documented evidence of widespread, opportunistic juice-jacking attacks against ordinary users (assuming the device is reasonably modern and up-to-date). Anyone who were to find such an exploit would not waste it on indiscriminately harvesting data of random public utility users. An exploit letting you freely access any significant number of phones (probably depending on OS, chipset, etc.) is the kind of stuff nation state actors dream of and would use on big, valuable targets. Spying on other nations, digging out megacorporations, a vulnerability like this is not worth deploying on a few random public charging stations for funs where it might get found.
 <WRAP box>
 <WRAP group>
-<WRAP half column>
+<WRAP half column centeralign>
-{{::screenshot_20261013-124849.png?400|}}\\
+{{ ::screenshot_20261013-124849.png?200| }}\\
 This was figured out by smart developers more than a decade ago.
 </WRAP>
-<WRAP half column>
+<WRAP half column centeralign>
-{{::screenshot_20261013-124830.png?400|}}\\
+{{ ::screenshot_20261013-124830.png?200| }}\\
 The reason why you're not meant to plug USB devices into computers at work is because Windows, and most computers at work, do not use a zero-trust architecture. They are quite open systems that aren't nearly as locked down as mobile phones.
 </WRAP>
@@ Line 33: / Line 33: @@
 </WRAP>
-There are products sold online that are meant to mitigate the risk of infection from public charging ports. These devices often come in the form of USB cables with the data transfer pins removed, making it physically impossible to transfer any data.
+There are products sold online that are meant to mitigate the risk of infection from public charging ports. These devices often come in the form of USB cables or adapters with the data transfer pins removed, making it physically impossible to transfer any data. The benefit of this approach is that it sets the risk of being targeted by an attack to zero. The problem is that this comes from people who think that this meaningfully increases their cybersecurity.
-Phones receive information from the outside world in several ways. One is through electrical signals sent over a USB cable, where changes in voltage encode data. Another is through radio waves, which the phone's wireless hardware receives and interprets as data. In both cases, the device's hardware and software determine how incoming information is processed and what it is allowed to do.
+For a comparison, it is useful to know that phones receive information from the outside world in several ways. One is through electrical signals sent over a USB cable, where changes in voltage encode data. Another is through radio waves, which the phone's wireless hardware receives and interprets as data. In both cases, the device's hardware and software determine how incoming information is processed and what it is allowed to do.
-Neither interface is inherently immune to malicious input. Vulnerabilities in the code that processes incoming data can theoretically be exploited, whether that data arrives through a cable or wirelessly((Disabling WiFi and Bluetooth, and turning on Airplane mode reduces exposure, but doesn't fully stop data processing either.)). But unlike data blocking USB cables, we do not store phones in Faraday cages, because the risk of actually being targeted that way for an ordinary end user is extremely low (though examples of past attacks like this do exist). The point here is that attacks like this exist //theoretically//, but theoretical attacks should not be conflated with attacks that reasonably happen in the real world.
+Neither interface is inherently immune to malicious input. Vulnerabilities in the code that processes incoming data can theoretically be exploited, whether that data arrives through a cable or wirelessly((Disabling WiFi and Bluetooth, and turning on Airplane mode reduces exposure, but doesn't fully stop data processing either.)). But unlike data blocking USB cables, we do not store phones in Faraday cages, because the risk of actually being targeted that way for an ordinary end user is extremely low (though examples of past attacks like this do indeed exist!). The point here is that attacks like this exist //theoretically//, but theoretical attacks should not be conflated with attacks that can reasonably happen in the real world.