you are viewing a single comment's thread
view the rest of the comments
[–] 7 points 9 months ago (5 children)

I am not terribly worried about USB/thunderbolt attacks since Android requires authentication before it does anything.

  • source
  • hideshow 5 child comments
  • [–] 7 points 9 months ago (1 child)

    Lol, plug a usb mouse or keyboard into your android and it will just work. Anything you can do these things can do.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 4 points 9 months ago*

    My phone still requires auth to use plus there is no way for them to get what's on the screen. I'm also pretty sure that typing a pin requires the screen but I could be mistaken.

    Even if there was a way to attack from USB, I still wouldn't be that worried. USB attacks typically are only used against targeted individuals not some rando. The reason why you see warnings about chargers is because it makes easy clickbait.

  • source
  • parent
  • [–] 4 points 9 months ago (2 children)

    No permission needed for a keyboard to open up a malicious webpage.

    Yes a keyboard. Your USB cable wears a trench coat that says "Hey I'm a Keyboard, lemmy in"

  • source
  • parent
  • hideshow 2 child comments
  • [–] 1 point 9 months ago (1 child)

    Last time I checked a keyboard can't just open up a web page. That's not how it works.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 4 points 9 months ago*

    Shortcuts...

    A human on a keyboard attached to a device while its unlocked can navigate to a webpage just bypressing keys, so malicious USB can just do what a person can do, but automatically.

    It probably works much better on a computer after the user walks away, it's a bit harder on a phone since most people instinctively presses the power button to turn off the screen so it autolocks (since you usually put it away in your pocket, so its muscle memory), but for a computer, there are certain people that just walks away to the bathroom or something and leave their device unlocked... so a person with access to a keyboard connected to that computer can do stuff on it... same as a script on a chip that sends keystrokes to the computer...

  • source
  • parent