WelcomeUser Guide
ToSPrivacyCanary
DonateBugsLicense

©2025 Poal.co

469

I think I need to buy/build a home x-ray machine just to check cables I buy. Maybe I can get one decommissioned from a dentists office. You know they can use a USB device now and don't need film?

I also have said this a million times to everyone. DONT PLUG RANDOM USB STUFF INTO YOUR COMPUTER. I don't care if you got some "pretty lights or some gadget from the internet" If it has a USB plug, DO NOT PLUG IT INTO A COMPUTER. If nothing else it could screw up your computer. It could also be a "bad" device that actively attacks your computer(s).

Archive: https://archive.today/8rGem

From the post:

>Most people know that they shouldn’t plug strange flash drives into their computers, but what about a USB cable? A cable doesn’t immediately register as an active electronic device to most people, but it’s entirely possible to hide a small, malicious microcontroller inside the shell of one of the plugs. [Joel Serna Moreno] and some collaborators have done just that with their Evil Crow Cable-Wind. This cable comes in two variants: one USB-A to USB-C, and one with USB-C to USB-C. A tiny circuit board containing an ESP32-S3 hides inside a USB-C plug on each cable, and can carry out a keystroke injection attack. The cable’s firmware is open-source, and has an impressive set of features: a payload syntax checker, payload autocompletion, OS detection, and the ability to impersonate the USB device of your choice.

I think I need to buy/build a home x-ray machine just to check cables I buy. Maybe I can get one decommissioned from a dentists office. You know they can use a USB device now and don't need film? I also have said this a million times to everyone. DONT PLUG RANDOM USB STUFF INTO YOUR COMPUTER. I don't care if you got some "pretty lights or some gadget from the internet" If it has a USB plug, DO NOT PLUG IT INTO A COMPUTER. If nothing else it could screw up your computer. It could also be a "bad" device that actively attacks your computer(s). Archive: https://archive.today/8rGem From the post: >>Most people know that they shouldn’t plug strange flash drives into their computers, but what about a USB cable? A cable doesn’t immediately register as an active electronic device to most people, but it’s entirely possible to hide a small, malicious microcontroller inside the shell of one of the plugs. [Joel Serna Moreno] and some collaborators have done just that with their Evil Crow Cable-Wind. This cable comes in two variants: one USB-A to USB-C, and one with USB-C to USB-C. A tiny circuit board containing an ESP32-S3 hides inside a USB-C plug on each cable, and can carry out a keystroke injection attack. The cable’s firmware is open-source, and has an impressive set of features: a payload syntax checker, payload autocompletion, OS detection, and the ability to impersonate the USB device of your choice.

(post is archived)