So my mom just sent me a pic of the restaurant she went to that offers customers the option to make use of their portable chargers while they wait for the food to be made.
I think this is a MASSIVE security risk to normies, why are they so stupid? Imagine if there was a rasberry pi or something inside the thing that copied your phone or installed malicious software on it!
I mean, maybe. But if you owned a coffee shop and wanted to fuck with their device, why not just MITM the WiFi?
Idiot are you a paranoid? Raspberry Pi couldn't last there inside without a exhaust from the cpu.
its an example of what could be in there you fuck
What else could be there? Gay retard
This is why I don't use a cable to charge my phone. Qi Chargers or nothing.
What exactly do I have to fear from sticking random usb cables in my phone with usb debugging disabled and default action being charging? How is it going to copy things from my phone or install malware on it?
I mean it may just fry my phone but that wouldn't be particularly subtle.
Retard schizo post but I'd be more worried about these things blowing up because they'd be used 100 times a day
perhaps a microcontroller that supports USB? e.g. STM32
So was your mother a retard that used it or not?
With your average Android phone being several versions behind the latest release and severely lacking on security updates, I'd be afraid of 0days. Luckily I bring my own power bank.
Don't most phones ask if you want to allow access when attached to a USB port that is more than a power source for exactly this reason?
just use a cable without data pins, it's not rocket science
>not carrying a power-only cable with you
REEEEEEE
this
default is charging only, no data
Fair enough. It'd have to be a severe hole in how the phone handles usb connections I guess but I don't know enough about this to rule out the possibility.
Yes, a 0 day would be used to target random passerby's - likely with a few dollars to their name - at shitty fastfood restaurants. Though does it even matter when the government controls you already because they tampered with your tap water?
Take off your tinfoil hat.
Why don't people just set up a qi charger in their car, and set their phone on it when they get in?
This.
>But if you owned a coffee shop and wanted to fuck with their device, why not just MITM the WiFi?
Absolutely this.
Normies connect to free Wifi no questions asked. There's not a single suspicious bone in their body.
If you wanted to attack devices in your shop, setting up free Wifi is the best way to do it.
Use a USB condom retard.
take your own cable with nothing connected but power and ID lines
Would a regular condom work?
Power only usb? Where can I buy it?
All over the place.
Dollar stores in particular.
I'm always a bit worried about those chargers at airports. Which seems like the ideal place for spy agencies to spread their malware.
Agreed, just add some bs ass long ToS and legally you'd be allowed to do so. kek
I mean a 0day several years old and freely found on dozens of github pages. With the current state of android phones, esp. the ones used by normies...
Ah, yes, of course. THOSE 0-days.
>whats https
android 9 does power only by default, yes
iOS doesn’t have this problem. Shitdroid users BTFO
Something not employed by enough services by default.
why would someone with a zero day exploit use it in a scenario like that? that doesn't make any sense.
you got a link to a single one or are you basing this on conjecture because i dont think you know what you're talking about
A microcontroller that'll do what? Blink LEDs?
>STM32
>blinking leds
I mean, It's not the only thing those microcontrollers are capable to do.
github dot com slash
smeso/MTPwn - arbitrary r/w of files on locked Samsung phones
sundaysec/Android-Exploits - collection of various exploits, some over USB
YES, they are all fixed in updated Android.
Once again I ask you, ARE retarded normies' and even more retarded carriers' phones likely to be fully updated?
battery gud
>normies
new poster to this thread here and yeah, you've got a point. i know tons of my coworkers dont update their phones because 'it breaks everything'. or 'it takes too long and i cant use my phone', other inane shit like that.
so, yeah, a ton of people (at least in construction) will just refuse to update their phones
unless newer android devices force updates, this tactic will still work on many people
Then turn off phone while charging if you are afraid
well the new updates do break everything, and they have for a while. especially assistant. i liked google now but fuck assistant. pie is hot garbage and i can't stand their new design language. its less functional and badly designed.
i would probably still be using a nexus phone and updating at any given opportunity if they, you know, still had a software development cycle that was actually concerned with delivering a better product version over version instead of whatever retarded bullshit they've been doing for the last 6 years
You can never truly turn off your phone.
>dyde can't charge my phone what if the cia is sending viruses through my power outlet durrrr
USB is literally a data transmission standard first and foremost you stupid fucker. It's not just a power outlet. Nobody's schizo'ing the CIA doing it, either, just regular old malware.
companies pay a lot of money for digital data nowdays.
why are you so worried about that ? do you have child porn on your phone? ...i bet you have child porn on your phone
We're talking about people who normalized carrying a mobile botnet in the first place.
Normies don't encrypt DNS-requests or use VPNs.
You really think some random restaurant spics are intelligent enough to hack your phone?
They just got the cheapest shitty powerbanks from walmart so they can distract you from how long they prep the food, because they're retarded
Any one specific one? Probably not. Go to enough places and plug into enough random shit and sooner or later you'll meet someone who has bothered to put some malware in they downloaded blindly, or let his edgy nephew do so. Not EVERY restaurant guy is gonna be completely tech illiterate.
Cut off a small piece of electrical tape and cover the 2 middle pins. Do not cover the 2 outside pins.
Voila, now you can make a thousand power cables for the cost of a roll of electrical tape.
>disable D+ and D-
>charge with only 5V/0.1A
>voila
autistic sped
it might charge a flip phone
you can just take it and see it for yourself with proper tools, i meant take it, not steal it, it's not the same
>MASSIVE security risk to normies
Dude you already use open wifi, and data, only that makes you very vulnerable.
If someone would want to do "evil" things to you, they dont need a stupid chink power-bank to do it.
Except that's not very fucking likely. Normies aren't going to have their phones set for USB debugging, which is required to transfer files off the phone without any sort of notification, and is required to install anything ON the phone via sideloading. And either way, they'll be asked if they want to give the device permission to do that, to which they'd likely press NO or start asking too many questions of the staff, such as "why is this charging brick asking for access to my files?"
>normies
>"why is this charging brick asking for access to my files?"
"It needs that to access your battery securely to charge it. Android is based on Linux and in Linux everything is a file, including your battery."
What if there was a land mine on the floor and someone fucking died?
I dunno man I guess most people just trust other to be good?
a meme that doesn't do anything
Like usual, only Android users have to worry about this attack vector
If they're asking questions, you've already failed. Once they're questioning it, then it's only a matter of time until you're found out. You don't want them asking shit. Instead you offer free WiFi and MITM. It only takes one person overhearing that bullshit that knows better to bring the whole thing down.
Yes. Normies. The people OP was talking about. Please try to keep up, brainlet.
Average android users can't afford eating in restaurants either way.
>Implying
If anything, I think iPhones would be the easiest to fuck over. It's pretty easy to sideload apps via injection without anything showing on the screen of the iPhone.
What is your mother's phone?
If the owner has some sick zero days.
>not using the newest Android version at all times
yea just browse the web via safari and have maleware installed just like that, no USB needed, less cables, less clutter, thats the apple way
>state actors won't be stopped by normal security
Shocker.
>normie