Hacker News Reader

Comment by codethief | Hacker News Reader

> but what can you really do?

Get a USB condom, for instance, practice safer charging. :)

Android asks me if I want to have a device to allow access, This probably prevents attacks against the upper layer protocols. Is the risk vector here the USB stack itself?

I think its possible to disable the USB 'protocol' in Linux, but it would require advanced permissions on android, which probably doesn't work out of the box, with IOS who knows or cares.

> Is the risk vector here the USB stack itself?

Yes, exactly. There are some comments here in the thread that discuss this in detail.

This is a joke, but it could actually be a thing. An isolator that you can use to protect your device while using those unknown ports. I would call it an isolator though, or firewall, not what you called it.

It's not a joke, it's the (informal) industry term. See this for example:

https://www.zdnet.com/article/protect-your-data-with-a-usb-c...

https://lifehacker.com/use-a-usb-condom-to-protect-your-devi...

Cool, didn't know they exist.

Also now USB-C condom is also available, It was an issue since USB-C used data lines to negotiate voltage and I was tracking its need on my problem validation for a while now[1].

[1] https://needgap.com/problems/73-usb-type-c-condom-usb-cybers...

> Also now USB-C condom is also available

Oh, I didn't know that! So what is the solution for USB-C? How do the new USB condoms work?

I'm not completely sure, I read on reddit that USB-C condom has some form of proxy circuit to negotiate voltage; I hope someone with better knowledge in this can explain it better.

They make those. They are called data blocker cables and only have power pins, no data.

...which are really annoying when you do need to transfer data to your phone, but all you have in your bag are data-blockers ;)

Not a joke. The thing exists

You can even make a type of them yourself with rudimentary equipment, by cutting the data lines and connecting/not cutting the power lines. I believe you will lose the ability to negotiate faster charging, and I don't know if USB-C will work at all, but it still works otherwise.

Reply on news.ycombinator.com