Then there is this.........ho hum

Status
Not open for further replies.

retired1

Administrator
Admin
Supporting Member
ECF Veteran
Verified Member
Apr 5, 2013
51,767
47,506
Texas
Definitely plausible. Tons of things have been weaponized to gain access to company networks. My favorite is a Nexus 6 cell phone that contains the standard compliment of penetration testing software.

Want an even easier way to gain access to a network? Drop off a basket of weaponized flash sticks with a company logo in the reception area. Yep, employees will snag them all and one of the first things they do when they get to their desk is plug it into the computer.

There are even weaponized power strips with USB ports for charging. Set one up at a public location and drop your payload on countless devices.

I'd be more worried about payloads designed to turn your e-cig into a device that's unsafe to use. It's one of the primary reasons why we do not allow individuals to upload firmware updates directly to ECF or link them to sites like Google drive. It would be far too easy for a bad actor to modify a firmware update to do terrible things to your e-cig.
 
Last edited:

BreSha6869

Vaping Master
ECF Veteran
Verified Member
Nov 21, 2015
4,876
18,564
57
Toronto, Canada
I stop reading any article that starts with the below immediately....

E-cigs are currently caught in the middle of a health debate, as numerous studies have argued that they are either better or worse than traditional tobacco cigarettes – but experts have yet to come to a conclusion.
 

Tonee N

Vaping Master
ECF Veteran
Verified Member
Mar 24, 2017
4,459
9,789
Nevada
Definitely plausible. Tons of things have been weaponized to gain access to company networks. My favorite is a Nexus 6 cell phone that contains the standard compliment of penetration testing software.

Want an even easier way to gain access to a network? Drop off a basket of weaponized flash sticks with a company logo in the reception area. Yep, employees will snag them all and one of the first things they do when they get to their desk is plug it into the computer.

There are even weaponized power strips with USB ports for charging. Set one up at a public location and drop your payload on countless devices.

I'd be more worried about payloads designed to turn your e-cig into a device that's unsafe to use. It's one of the primary reasons why we do not allow individuals to upload firmware updates directly to ECF or link them to sites like Google drive. It would be far too easy for a bad actor to modify a firmware update to do terrible things to your e-cig.
You could be a very scary person if you wanted to be.[emoji3]jk

You are absolutely right about the flash drive bit. Candy for kids. I would probably be the person who picks up five of them and give them away to friends.
Once you add BT or Wifi to a mod you're no longer swimming in the kiddy pool.
Put tape over the webcam on the laptop and put the cell in the microwave. (Sorry, just watched Snowden)

Sent from tomorrow
 

kbeam418

Super Member
ECF Veteran
Mar 5, 2015
784
1,422
Toledo,Oh
You could be a very scary person if you wanted to be.[emoji3]jk

You are absolutely right about the flash drive bit. Candy for kids. I would probably be the person who picks up five of them and give them away to friends.
Once you add BT or Wifi to a mod you're no longer swimming in the kiddy pool.
Put tape over the webcam on the laptop and put the cell in the microwave. (Sorry, just watched Snowden)

Sent from tomorrow

The whole tape over the webcam thing is a load of bull crap. You still have the microphone and the led is hardwired to come on when ever the camera receives voltage. So if somebody is spying on you you'll know because the led will be on. BT is pretty dang secure on a modern os/firmware. Wifi is very secure as long as you're using wpa 2 and have a strong password.
 
  • Like
Reactions: Kprthevapr

retired1

Administrator
Admin
Supporting Member
ECF Veteran
Verified Member
Apr 5, 2013
51,767
47,506
Texas
The whole tape over the webcam thing is a load of bull crap. You still have the microphone and the led is hardwired to come on when ever the camera receives voltage. So if somebody is spying on you you'll know because the led will be on. BT is pretty dang secure on a modern os/firmware. Wifi is very secure as long as you're using wpa 2 and have a strong password.

Sorry, not true. They've figured out how to modify the camera's firmware years ago and can routinely use the built in camera on notebooks (as well as web cams that use Realtech drivers) without the LED coming on. In some cases, it's a simple matter of a registry edit.
 

kbeam418

Super Member
ECF Veteran
Mar 5, 2015
784
1,422
Toledo,Oh
Sorry, not true. They've figured out how to modify the camera's firmware years ago and can routinely use the built in camera on notebooks (as well as web cams that use Realtech drivers) without the LED coming on. In some cases, it's a simple matter of a registry edit.

Depends on the laptops wiring, the dells I've seen use the same power rail that the webcam uses. Use anti-virus (better yet use mac or linux) and make sure the drivers are up to date and I doubt you'll have issues. I've had that virus before btw.
 
  • Like
Reactions: Diver9543

90VG

Super Member
ECF Veteran
Jan 19, 2016
626
1,454
5000' in Nevada
Any modern computer will not have autorun from USB enabled. So you can't run programs just by plugging it in. Keyboard control would be noticed. I've written USB HID (Human Interface Device) software on PIC18F platform before. It's pretty limited what you could do with that, keyboard/mouse/joystick.

I supposed you could do, start ->run -> some website, then click enter to install some bad software. But really, modern OS's are pretty decent about stuff like that. The timing would have to be perfect too, since it can't read the screen. It's a one way, send only keyboard/mouse type thing.

Even the example program just started notepad and put up some words. That's very easy to do if you have the tools of the platform and can get people to install the firmware (which usually isn't that easy for newbs).
 

Butch

Vaping Master
ECF Veteran
Verified Member
Nov 20, 2011
7,243
31,637
433 miles north. of the Alamo
Any modern computer will not have autorun from USB enabled. So you can't run programs just by plugging it in. Keyboard control would be noticed. I've written USB HID (Human Interface Device) software on PIC18F platform before. It's pretty limited what you could do with that, keyboard/mouse/joystick.

I supposed you could do, start ->run -> some website, then click enter to install some bad software. But really, modern OS's are pretty decent about stuff like that. The timing would have to be perfect too, since it can't read the screen. It's a one way, send only keyboard/mouse type thing.

Even the example program just started notepad and put up some words. That's very easy to do if you have the tools of the platform and can get people to install the firmware (which usually isn't that easy for newbs).

After reading the above post, I am going out as soon as I finish typing & buy 3 canning size pressure cookers to put my tablet & all my regulated mods in so I can bury them & be safe from all those snopers.


Somebody please send me a tinfoil hat......I am not very talented at making things.........:unsure:
 

DPLongo22

"Vert De Ferk"
ECF Veteran
Verified Member
Dec 17, 2011
32,999
183,143
Midworld
... And if you happen to be vaping a juice with diacetyl in it, fuggedaboudit. You'll first hear a snap, then a crackle, followed by a loud & final "POP".

After which your computer will immediately be converted into a bowl of breakfast cereal.

It's all true, I tell ya. I read it on the internet.

Sent from my SM-G935V using Tapatalk
 

stols001

Moved On
ECF Veteran
May 30, 2017
29,338
108,120
You know, given the battery warnings on my IPV-5, you get the right amount of them in one place, and you have a WMD! That doesn't mean it's EVER going to happen; it also doesn't mean that e-cigs kill people or otherwise can be misused, it means that people are jerks, is what it means, exactly.

I'm no computer expert, I didn't read the article, but as far as I'm concerned, computer hackers are FAR more likely to *use* an e-cig for its intended purpose, and use more conventional, easier methods of hacking. I mean, lawnmowers are misused and occasionally someone loses a foot, or an eye? And yet, we still drive cars, one of the most lethal things on earth, not to mention (unless you live in the desert, as I do) lawnmowers.

Please.

Yes, I also believe in my second amendment rights. I have yet to see a gun walk itself out of a gun show and randomly start shooting people (Not appropriate for ECF) without a human attached to it, in some manner.

Then, we have this: http:// www.nelsonbarry.com/burn-injuries/the-top-10-most-dangerous-common-items-in-your-home-and-what-to-do-if-you-are-injured/

Anna
 
Last edited by a moderator:
  • Like
Reactions: Tonee N

retired1

Administrator
Admin
Supporting Member
ECF Veteran
Verified Member
Apr 5, 2013
51,767
47,506
Texas
Any modern computer will not have autorun from USB enabled. So you can't run programs just by plugging it in. Keyboard control would be noticed. I've written USB HID (Human Interface Device) software on PIC18F platform before. It's pretty limited what you could do with that, keyboard/mouse/joystick.

People used to say that a VM was a foolproof way of protecting your machine as well.

Exploits are popping up all the time (including ways to defeat a VM and infect the actual host machine). Expecting the OS will protect you just isn't feasible in today's day and age.
 
Status
Not open for further replies.

Users who are viewing this thread