Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

That's hard if your laptop relies on USB-C for charging...


I specifically don't recommend laptops that rely on USB C charging for applications where trust is critical -unless- they are running Linux with USBGuard or QubesOS.

That said I did make transparent and easily auditable USB type C condoms for one client that really wanted to use USB type C laptops.

Systems with security as a strong priority like the Librem 14 use barrel jacks for good reason.

I am in fact implying those that allow use of macbooks at coffee shops to directly access production systems at FAANG and fintech companies are taking a very inappropriate risk :-P


USB C charging happens well below the OS layer, using firmware that often isn't all that good. USBGuard or QubesOS won't help there (but will somewhat mitigate attacks trying to move up the stack)


The problem is not the charging. The problem is that a fake charger cable can run an HID attack over the +/- pins before it does a pass through to the power negotiation MCU for charging.

A tampered USB C to C cable on a conference room table can compromise people all day long.

If the USB C charge ports cut the data pins entirely then great, but I have not seen that be the case on any laptops yet.


Because few want USB-C ports dedicated to charging. The point of USB-C if flexibility. "One port to rule them all".




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: