• Justin
    link
    fedilink
    English
    1742 months ago

    Plugging into a random usb port is bad security

    • @halcyoncmdr
      link
      English
      852 months ago

      Not really bad if you use a power-only cable. If the data pins aren’t even wired up, can’t move anything other than power.

      Not sure if that works with USB-C at anything other than legacy 500mA power draw though, probably not since the device can’t communicate for what it supports.

      • @aeronmelonM
        link
        English
        692 months ago

        If your device has good software, it will only allow power unless you authorize a data connection.

        • @turmacar
          link
          English
          632 months ago

          * Assuming there is no bug, zero-day, or other vulnerability on the current version of your fully updated device.

          Having a power-only cable removes that as a possibility.

      • @[email protected]
        link
        fedilink
        English
        302 months ago

        Now if only usb cables were labeled like Ethernet cables.

        It amazes me how given the complexity of the USB specifications, where everything looks the same but it is not the same, nothing is ever labeled.

        • @seaQueue
          link
          English
          112 months ago

          Some things are but the labelling is stupid and tiny. Many laptop ports are labeled but people aren’t familiar with the icons (and the icons are often confusingly similar)

          • @xantoxis
            link
            English
            82 months ago

            Well–to bring it back to the security point, you can’t trust the icon on the port anyway. You need a well-labeled cable, and, good luck

        • @amorpheus
          link
          English
          3
          edit-2
          2 months ago

          That’s never stopped companies from making something, like A to A USB cables.

      • @[email protected]
        link
        fedilink
        English
        82 months ago

        With this arrangement, they probably can’t steal your data. But they can absolutely destroy your phone with a string electric shock, if that’s the sort of malicious plan they have.

      • fmstrat
        link
        fedilink
        English
        82 months ago

        Until you find that person who wired a 48v USB plug, just for you.

        • @sploosh
          link
          English
          22 months ago

          USB-PD standards push 50v. Go with wall voltage (110-220v 60/50hz) to be sure.

      • @aulin
        link
        English
        22 months ago

        Not really bad if you use a power-only cable.

        Or a USB condom. But I never really hear about those anymore.

    • @Bangs42
      link
      English
      172 months ago

      There has never been a proven case of juice jacking, anywhere, ever.

      • @myplacedk
        link
        English
        152 months ago

        But I have seen multiple phones get harmed by a really bad charger. Although these chargers were not for public use.

        Still, it’s not a bad idea to bring a power bank. And then charge that, if you need to.

      • AbsentBird
        link
        fedilink
        English
        13
        edit-2
        2 months ago

        At least that’s what the juice jackers want us to think.