Plugging in the power – or at least what you think is power – to a USB-C powered laptop can connect your computer, and the valuable personal data on it, directly to hackers. Your personal financial information, passwords and documents stored on the laptop could help a cybercriminal steal your identity. The laptop may even be used to attack your employer’s computers and network.
The European Union is already moving to require all smartphones be compatible with USB-C power adapters – itself a move that endangers users’ privacy. If the EU made a similar standard for laptop computers, it would threaten to make the problem worse, by increasing the number of people vulnerable to what is basically the digital equivalent of pick-pocketing.
From mobile phones to laptops
Mobile phones have been hackers’ targets for years. Phones that are left behind or stolen can contain sensitive personal data that can let a criminal open a new bank account or take out a loan.
However, a far more insidious way to get the data is to simply connect to the phone and steal everything it holds. As the phone is not lost, the user may be unaware that anything is wrong. Attackers try to get access to mobile phones via their internet connections and local wireless connection technologies like Bluetooth and Wi-Fi.
But some attackers are finding a weakness in phone charging. Many newer phones use the same port – one of several types of USB – for both connecting to a computer and charging. A charger could be modified to attack your phone via that trusted connection. This has led some researchers to recommend never using public USB chargers for your smartphone.
Older mobile phones, including some smartphones, that used power-only connections didn’t have to worry about this issue. Users of these devices can plug in to public multi-device charging stations without worry, as there is no connection to the device’s data. For those with combined data and power ports, however, the same port that many people only use to power their phone is commonly used by hackers and even law enforcement to access the data on it.
Laptops can now be attacked by USB power ports
Until recently, laptop computers had enjoyed some protection, with most having a dedicated power port to connect their chargers to. Other purpose-specific ports allowed connections to desktop monitors, conference room projectors and other devices, without need for concern. USB-C changed this, with one high-speed port now able to provide and receive power, send video signals to projectors and monitors, and connect to USB thumb drives and numerous other peripheral devices.
Most of the time, this is extremely convenient, reducing the number of different ports needed on today’s lightweight and compact laptops. However, it also allows criminals to attack the computer of an unsuspecting user who is just trying to charge the device’s battery.
With the European Union potentially requiring phone makers to standardize on USB-C chargers to reduce waste and provide consumer flexibility, similar rules for laptops may not be far behind. In any case, people with laptops powered by USB-C and those who connect to USB-C screens and projectors in public areas need to be vigilant.
Compared to a mobile phone, laptops may contain far more data. Some laptop users may not have these files backed up to other locations, which makes them vulnerable to deletion or even encryption for a ransom payment. Hacked laptops can also serve as a method to get viruses and other malware into sensitive business or government facilities, bypassing firewalls, intrusion detection systems and other network security mechanisms. In short, they may be much more attractive targets to hackers.
Prevent problems by not plugging in
As someone who researches and teaches courses related to cybersecurity, I follow numerous reports of scam websites, all manner of fraudulent callers and electronically distributed viruses – all trying to steal personal information.
Criminals run these scams from the other side of the world, making them hard to track down and bring to justice. While there is little you can do to prevent your data from being released by large-scale hacks of personal data like the Equifax breach, you can reduce your risk of power-connection hacking.
USB-C laptop users should not plug in to airport, hotel or other public USB ports without protection. Charge-only adapters, portable USB batteries and cables that can shield the data connection are possible solutions. At present, in most cases, it is best to just plug the laptop’s power supply into a normal wall power outlet; many public USB ports, which follow the older USB-A standard, don’t yet provide enough power to run and charge a laptop anyway.
When connecting to other devices, check for signs of tampering, such as missing screws, scuffing and other wear – particularly around screw holes and edges. When projecting for others, use your own USB-C to VGA or HDMI converter and connecting to these ports.
Over time, the computer industry may be able to create tamper-evident USB devices and other ways of protecting USB users, like ATM manufacturers have tried to do. Until then, USB-C users need to protect themselves by not connecting to public, insecure and other potentially compromised or suspicious USB ports. Information technology managers face a tougher battle and may try to avoid USB-C powered devices or train users to use them safely.
Stephen Colbert rips ‘idiot’ GOP senator for defending Trump’s unconstitutional self-dealing
"Late Show" host Stephen Colbert returned from New Zealand for a new show that aired Monday evening.
"I have been as far from the insatiable black hole of news that is Donald Trump as you can get on this planet.
I've heard there have been some developments over the last 10 days that did not go well for Donnie,"
The host ripped Trump's 71-minute press conference.
"Seventy-one minutes is not a press conference, it's a one man show," he explained. "If you liked 'Fleabag,' you'll love Donald Trump in 'Douchebag,'" he said.
[caption id="attachment_1555275" align="aligncenter" width="800"] ‘The Late Show’ graphic (screengrab)[/caption]
Donald Trump is making a mockery of Marco Rubio — and the Florida senator is letting him
Sen. Marco Rubio was once one of Donald Trump’s most formidable opponents; now, the Florida senator bends over backward to excuse the president’s corruption.
In 2016, Rubio and Trump sparred frequently on the Republican primary debate stage. Trump picked the uninspired nickname “Little Marco” for the senator, which didn’t seem to do much damage on its own, but Rubio never gained the momentum or strength that his backers hoped would prove to be strong enough to take down the reality TV candidate. As Rubio grew desperate, he launched one of his most memorable and pitiful attacks by stooping to his opponent’s level, implying that Trump had a small penis. It was more of an embarrassing moment for Rubio than anyone else, though Trump helped himself with a crude rejoinder.
The faith of Fox News: How the network’s propaganda warps viewers’ sense of reality
A longtime sticking point among Fox News employees is their insistent differentiation between its news division, where employees practice actual journalism, and its opinion division, where employees practice actual nativism, spew misinformation, and have been actively campaigning for Donald Trump’s re-election since 2016. Inside the organization, they claim to believe that the news side is separate from the opinion side, and insist that the audience can tell the difference.
News anchor Shepard Smith once characterized comparing the two as “apples and teaspoons.”