This report from Tencent just shows that there are other dangers as well, stemming from that same issue.When you have more than one or two gadgets, the outlets near that kitchen counter can get very cluttered. The issue you face, of course, is all about data and security compromise. You are surrounded by countless little computers, many of which you connect to your wifi and offer a route to the outside world. we pay little attention to the kitchen gadgets, the smart home accessories, and the toys we buy online from makers we have never heard of before.
Our homes and offices are now filled with tech, and while we worry about our computers, phones and tablets. That advice-to be careful when you connect your smart device with a smart cable that can do more than simply charge-is the same in both cases.īeyond the specifics, this is yet another warning on the perils of the fast-growing IoT space, where we buy, plug-in and connect myriad devices. We have even seen compromised data cables used for the same purpose, where the cable hides a wireless connection. That issue has been all about the potential for data theft, when you use a data cable to charge your device and do not know the provenance of the charger itself.
We have seen warnings before on the use of chargers, either those in public spaces or those we borrow from others. You should take care of the chargers you use. A simple attack that might impact your ability to communicate, to potentially knock you offline, could be relevant. There is a slightly darker threat here also, one that impacts those of you that might find yourselves targeted by bad actors. Sticking to well-known manufacturers is clearly a sensible precaution here, as with any such devices you plug in at home. This means the chargers you buy online-with no way of knowing which might be vulnerable-could damage your device or worse. There is a broad problem here, with wide scale safety measures not yet in place. So, is this really an issue for you to worry about? That depends. Clearly, with this issue disclosed, revised standards need to be put in place. The research team at Tencent’s Xuanwu Lab reported the issue to the China National Vulnerability Database (CNVD) and will also engage with affected manufacturers, they say, on mitigation techniques. Their advice is not to plug basic 5v devices into fast chargers with a USB to USB-C cable. Of those, they found “at least 18 had BadPower problems and involved eight brands.” Of those 18 charging devices, 11 were vulnerable to a simple attack through a device that also supports the fast charging protocol, such as a mobile phone.Īccording to the researchers, while there is a risk with devices that are designed to be fast charged, the greater risk is with those that are not. The researchers identified 234 fast chargers on the market, and tested 35 of them. Tencent have dubbed this issue “BadPower,” and warn that “all products with BadPower problems can be attacked by special hardware, and a considerable number of them can also be attacked by ordinary terminals such as mobile phones, tablets, and laptops that support the fast charging protocol.” Tencent has produced a demo video, showing how a charger can be compromised and then used to overload a device.
0 kommentar(er)
