Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.
To recap: if you plug hacking hardware into your computer, you can be hacked. Overall, not a big surprise, but it also seems like a valuable exploit. I wonder if the iPhone can also be hacked with this technique, or if it's because the Mac is still less locked down.
 
don't know where this USB-A thing is going to be plugged in, but if it's anything from Apple nowadays then there's at least 1+ dongles in the chain. Will it still work then?
 
This is the 'don't plug in random USB sticks you find lying around' all over again. What's old is new, I guess.

I'd almost not want to call this a remote exploit since:

1. It requires physical access to the computer.
2. You have to essentially be in the same room with it.

The people who make the cables say if there's an open wifi access point in the vicinity of the cable then it can join it to make the range effectively limitless.
 
This kind of stuff is actually quite common. You can basically take a off the shelf microcontroller like and Arduino and have it pretend to be a USB/Keyboard and mouse. If your interested in this stuff search up the Rubber Ducky and Bad USB as a good starting point.

Basically what they did here was streamline this tech and hid it into a cable, and threw some wireless networking in the mix. I'm not really too surprised here, this seems like a pretty natural progression from handing someone a USB flash drive to now handing people cables.
 
Is USB-C more secure by default? I'd trust an open standard to do better to prevent this than a private one.

Uh, what private standard are you talking about? This is using standard USB.

The people who make the cables say if there's an open wifi access point in the vicinity of the cable then it can join it to make the range effectively limitless.

You mean an unsecured WiFi access point. How would it know the password for your WiFi?
 
  • Like
Reactions: Sikh
To recap: if you plug hacking hardware into your computer, you can be hacked. Overall, not a big surprise, but it also seems like a valuable exploit. I wonder if the iPhone can also be hacked with this technique, or if it's because the Mac is still less locked down.

Most likely, the latter, as the Mac is running a legacy OS at this point...
 
Dangerous stuff. But this gives Apple an idea of what they’re looking at in terms of how something can be infiltrated through a lightning cable, hopefully they can figure out something with their suppliers to make sure this doesn’t come to fruition where this could spread into the masses where a users info could be compromised.
 
??? the OP thinks that $200 is prohibitively expensive for a criminal organization, government spy agency, or industrial spy...
Heck a hobbyist or jealous partner could afford it...
$200 is expensive if you don't have a clear target. If these cables could be produced for only a few dollars each, then they could sell millions on Amazon to unsuspecting users. That would turn into a real problem for many users without targeting any single user which is the definition of a massive data breach.
 
Clever hack! Probably nothing new to government counterintelligence experts. This would make for a fun subplot in a spy movie, where someone sneakily replaces someone else’s cable.
 
But, my logic was that the modified cables in the article are Apple cables and Anker cables are not at all
Apple cables. Therefore Anker cables "should be" safe.

That logic is flawed. The right logic is that somebody hacked an Apple cable, therefore somebody can just as easily hack an Anker cable because they are fundamentally identical.

The points are that people can hack Anker cables easier because the connector housings are slightly bigger than Apple's, some of the connectors are two-piece and easier to separate, and the supply chain of getting Anker cables from the factory to you is not as tight as Apple's (e.g. involving third-party Amazon sellers).
 
  • Like
Reactions: dwsolberg
Sounds like a rumor from Apple to scare people into buying their overpriced cables directly from them. Cha-ching...
 
I know this is fake news cause my co-workers just told me last week that Macs are immune to viruses and hacks.
 
  • Like
Reactions: AZcjohnson
A more realistic threat is as freebies at business to business tradeshows.

used to end up with lots of USB flash drives that way but now I don't accept them or just throw them away...
I've heard the usb plugs used to recharge vape pen are also contaminated.
 
If you stick a random connector into your port you have high risk of getting STD.
 
How is this even a public service announcement? A security researcher develops a cable that can be used to infiltrate your system... all for what purpose... what is his personal motivation for developing a cable and then telling everyone that it exists? This whole exercise seems very self serving... like he was just needing to get his name mentioned...
 
Any cable that pass data in addition to power has this vulnerability. Do we really know what is on the other end of a USB port at that coffee shop, hotel room, or airport charging station.

This attack adds the wireless component, which could be potentially added to any power and data cable (Lightning, USB A, USB C, ...)
 
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.