Open Menu
AllLocalCommunitiesAbout
lotide
AllLocalCommunitiesAbout
Login

USB-C cable CT scan reveals sinister active electronics — O.MG cable contains a hidden antenna and another die embedded in the microcontroller

⁨102⁩ ⁨likes⁩

Submitted ⁨⁨5⁩ ⁨months⁩ ago⁩ by ⁨misk@sopuli.xyz⁩ to ⁨technology@lemmy.world⁩

https://www.tomshardware.com/tech-industry/cyber-security/o-mg-usb-c-cable-ct-scan-reveals-sinister-active-electronics-contains-a-hidden-antenna-and-another-die-embedded-in-the-microcontroller

source

Comments

Sort:hotnewtop
  • floofloof@lemmy.ca ⁨5⁩ ⁨months⁩ ago

    Industrial CT scanner manufacturer Lumafield imaged an O.MG USB-C cable revealing sophisticated electronic components secreted within the connector.

    The headline is clickbait I think. The whole point of the O.MG cable is to hide electronics in the connector. The analysis of what can be seen in there may be interesting, but it’s not like this is secret knowledge.

    shop.hak5.org/products/omg-cable

    source
    • OutlierBlue@lemmy.ca ⁨5⁩ ⁨months⁩ ago

      So the manufacturer isn’t spying on you, it just designed a product so someone else could hack you instead? That doesn’t make it sound any better.

      The end result is the same: be careful what cables you plug into your device.

      source
      • kn33@lemmy.world ⁨5⁩ ⁨months⁩ ago

        The end result is the same: be careful what cables you plug into your device.

        Sure, but this is clickbait at best. It’s not a revelation that this cable contains that hardware.

        source
      • nondescripthandle@lemmy.dbzer0.com ⁨5⁩ ⁨months⁩ ago

        Its designed to be used for pen testers so they don’t have to spenr $20,000 on the alternative cable. Its a single cable thats costs like $200, so im not really worried many people are going to get hacked because they accidentally bought a $200 cable.

        source
        • -> View More Comments
      • AnyOldName3@lemmy.world ⁨5⁩ ⁨months⁩ ago

        The intended use for this kind of product is that you hire a company to break into your company, and then tell you how they did it so that criminals (or, if you’re someone like a defence contractor, foreign spies) can’t do the same thing later. Sometimes they’re also used by journalists to prove that the government or a company isn’t taking necessary precautions or by hobbyists at events where everyone’s aware that everyone else will try to break into their stuff. There’s typically vetting of anyone buying non-hobbyist quantities of anything, and it’s all equipment within theoretical reach of organised crime or state actors, so pentesters need to have access, too, or they can’t reasonably assess the real-world threat that’s posed.

        source
      • floofloof@lemmy.ca ⁨5⁩ ⁨months⁩ ago

        Yes, if someone used one of these against you, you could be in trouble. The company that makes it also makes a detector that can spot it:

        shop.hak5.org/…/malicious-cable-detector-by-o-mg

        source
        • -> View More Comments
  • SnotFlickerman@lemmy.blahaj.zone ⁨5⁩ ⁨months⁩ ago

    Every other page on Tom’s Hardware is loading for me just fine but this article is just pulling up a completely blank document?

    source
    • JohnnyCanuck@lemmy.ca ⁨5⁩ ⁨months⁩ ago

      They probably pulled the article since it was bullshit, based on the other comments.

      source
    • cypherpunks@lemmy.ml ⁨5⁩ ⁨months⁩ ago

      same here; other articles there load fine but this one gives me HTTP 500 with content-length 0.

      (the empty body tag in your screenshot is generated by firefox while rendering the zero-length response from the server, btw.)

      source
    • lurch@sh.itjust.works ⁨5⁩ ⁨months⁩ ago

      I hope you’re not hacked and the attacker is blocking URLs that could help you find out.

      source
    • Shdwdrgn@mander.xyz ⁨5⁩ ⁨months⁩ ago

      Same here, I was wondering what was going on.

      source