Hacker News Reader

Comment by george_max | Hacker News Reader

Very nice. I am wondering -- why have a devboard this small?

...trust me this is the best USB cord ever try it out for free, ill sell you some cheap if you get a couple friends to buy some.

https://shop.hak5.org/products/omg-cable

https://phreakboutique.com/blogs/tutorials/using-your-new-ev...

thats how the grift starts...

That's it, I'm going back to parallel port cables for everything now.

The parallel port (at least in it's later implementations) actually supports DMA - I'm sure that data exfiltration via the parallel port is hard, but probably not impossible...

Nothing is safe, unfortunately!

The parallel port controller can DMA, that lets the driver tell the port hey, send this buffer out to the port and let me know or read this many bytes into this buffer and let me know. It's not peripheral controlled DMA like with firewire or PCI.

You can absolutely exfiltrate data via the parallel port... that's why you attach printers or zip disks... it's just that it needs host participation.

It’s almost certainly impossible on modern systems. The southbridge which allowed DMA to parallel port was absorbed into PCH and slowly stripped of legacy LCP support by chipset and motherboard manufacturers.

If I were an evil person I would start a cable shop where I sell all kinds of cables. And based on who the customer is I would send them a real cable or one with a nice and free to them surprise extra payload.

Who is going to x-ray each and every cable they buy? And who keeps track of where they sourced what cable?

you should tender to NSA. less liability exposure, probably better revenue.

there is an interception and controlled delivery often used to get at the big problems.

you should never trust a "ground score" if your doing anything bad, it could be a controlled delivery.

considering current events i speculate there may be an uptick in this type of security operation.

https://www.schneier.com/blog/archives/2014/03/cottonmouth-i...

https://en.wikipedia.org/wiki/ANT_catalog

Fuck the NSA. I did start off with 'If I were an evil person'. If I were an even more evil person I would go to work for the NSA. But no worries, I'm not politically aligned with anything in the USA right now and saw the writing on the wall two decades ago.

Reply on news.ycombinator.com