* The risk on any modern phone is close to nonexistent. By default they only charge. You'd need a zero day exploit in the charging function.
* There are no reports of such attacks ever having happened in the wild.
Stop worrying about fake security threats. There are enough real ones.
Edit: just checked - it's indeed possible with Android 14. Connecting a mouse doesn't require any confirmation. As long as the phone is unlocked, you can adjust the USB settings with that mouse.
It's probably safe enough to recharge your battery pack and charge the phone off that, even at the same time if supported.
If you already had it on, you could probably use it own the device pretty quick, but it's not enabled by default.
"""To connect a Bluetooth device:
1. Go to Settings > Accessibility, and select Touch.
2. Select AssistiveTouch > Devices, then select Bluetooth Devices.
3. Select your device from the list."""
Is this requirement a very recent change?
(I don't have my own iPad with me right now, but I don't recall enabling AssistiveTouch to get the Logitech keyboard+trackpad working.)
EDIT: I looked online and apparently prior to 13.4 AssistiveTouch was required to use a mouse. But now you don't need it if you only want basic mouse functionality.
What's going over there I wonder?
It's like this guy I used to work for. Anytime someone would ask him to make a pdf copy of a document he would print it out, scan it on the copier and email it to himself.
There has to be some of those types over there. This came from their desk.
What you scan is what you get (potentially some information about the scanner too)
That's a pragmatic strategy to ensure that sensitive information isn't leaked.
Other than potentially including useful vector formats of artwork such as seals, logos and signatures, the visibility and/or mask settings can easily hide sensitive information that is trivial to extract later with standard vector editing software.
The print+scan method ensures that the person sharing the file is fully aware of exactly what is being handed over. It also deals with redactions which were not implemented properly.
>Failed redaction reveals Paul Manafort's 'lies to FBI'
https://www.bbc.com/news/world-us-canada-46804127
Moving deeper into just redaction failures:
The American Bar Association even has a topic dedicated to redaction failures, where they list numerous examples of it (including the one above):
https://www.americanbar.org/groups/judicial/publications/jud...
Yet redaction failures are just one of many ways that a PDF can overshare, simply printing and scanning it solves a great many problems. I think it's a good approach for people who aren't tech savvy, especially with longer documents.
1) Print 2) Cut out the parts you want to leave out (blacking them with a market might leave an opening for revealing them via some contrast tweaking) 3) Scan
Easy to explain, easy to implement, easy to remember.
No ot wasn't, it was because he didn't know how to use computers.
Source: https://slate.com/technology/2023/04/free-public-phone-charg...
My Fairphone 4 with vanilla Android 11 when connected to a USB C monitor will immediately mirror the screen without any sort of notification, so an evil charging port could at least record everything I do, no zero days required.
The fact that this hasn't been exploited in the wild much is good, but doesn't mean that the advice is wrong. Unless the vulnerabilities themselves are all patched it _will_ be exploited in the wild eventually.
Infection is now potentially higher due to increased OTG usage given the removal of MicroSD by many manufacturers. (The removal of the MicroSD has been a damn inconvenience irrespective of the OTG matter.)
I personally just prefer to charge a cheap USB battery so that I can use it for anything that needs a charge. Many of them now also have a flashlight like the phone.
https://www.deccanchronicle.com/technology/in-other-news/120...
Are you saying that there are no unfixed exploits in the USB stack ?
Maybe this discussion is too nuanced for HN. Best we just tow the line, and agree that phishing and websploits is the biggest problem and other issues are not worth addressing even when we can.
The FBI disagree:
> Bad actors have figured out ways to use public USB ports to introduce malware and monitoring software onto devices. Carry your own charger and USB cord and use an electrical outlet instead.
I'd rather take advice from them than a random commenter here who has no insight into what's actually happening within the criminal world.
No it doesn't. The line you quoted says such an attack is theoretically possible, it doesn't say it has ever happened. And as another comment mentions, the tweet wasn't some update on things happening, they were parroting an old general practices guide.