Hacker News Reader

The sad thing for me is that for years on "spy" movies and action movies the hero (or villan) would go into an office or a house or something, plug in a USB device and "boom!" own the machine. I took some comfort that this wasn't really possible, and then this happens.

View on HN

With badusb and other exploits I've heard security researchers suggest treating usb devices as hypodermic needles and never reuse them and guard your ports like your veins. Almost impossible to actually do, but gives you a sense of just how freaked out the people who know what they're doing are by all this.

It doesn't own the machine though, just MITMs some non-HTTPS websites. It's a weaker attack than what the movie villain could do by replacing your DSL/cable NAT box. (or adding a RPi "bridge" behind it)

Is this prevented by HSTS?

Reply on news.ycombinator.com