Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.misc > #12580 > unrolled thread

[CM] the USB killer now exists and is being mass-produced

Back to article view | Back to comp.misc

Contents

  [CM] the USB killer now exists and is being mass-produced RS Wood  <rsw@therandymon.com> - 2016-12-03 16:36 +0000
    Re: [CM] the USB killer now exists and is being mass-produced Sylvia Else <sylvia@not.at.this.address> - 2016-12-04 14:40 +1100
      Re: [CM] the USB killer now exists and is being mass-produced Eric Pozharski <whynot@pozharski.name> - 2016-12-04 16:11 +0200
        Re: [CM] the USB killer now exists and is being mass-produced Sylvia Else <sylvia@not.at.this.address> - 2016-12-05 11:25 +1100
          Re: [CM] the USB killer now exists and is being mass-produced The Real Bev <bashley101@gmail.com> - 2016-12-05 08:27 -0800
            Re: [CM] the USB killer now exists and is being mass-produced RS Wood <rsw@therandymon.com> - 2016-12-05 20:28 -0500
            Re: [CM] the USB killer now exists and is being mass-produced Sylvia Else <sylvia@not.at.this.address> - 2016-12-06 13:18 +1100
              Re: [CM] the USB killer now exists and is being mass-produced Paul Sture <nospam@sture.ch> - 2016-12-06 09:24 +0100
                Re: [CM] the USB killer now exists and is being mass-produced Sylvia Else <sylvia@not.at.this.address> - 2016-12-06 21:49 +1100
                  Re: [CM] the USB killer now exists and is being mass-produced Eric Pozharski <whynot@pozharski.name> - 2016-12-07 09:47 +0200
    Re: [CM] the USB killer now exists and is being mass-produced Andy Burns <usenet@andyburns.uk> - 2016-12-07 18:56 +0000

#12580 — [CM] the USB killer now exists and is being mass-produced

From the «plug into your ass for bonus points» department:
Title: The 'USB Killer' Has Been Mass Produced -- Available Online For About $50
Author: help@slashdot.org
Date: Fri, 02 Dec 2016 20:25:00 -0500
Link: http://rss.slashdot.org/~r/Slashdot/slashdot/~3/hAudAdRP9oo/the-usb-killer-has-been-mass-produced----available-online-for-about-50

New submitter npslider writes: The "USB Killer," a USB stick that fries almost
everything that it is plugged into, has been mass produced -- available online
for about $50. Ars Technica first wrote about this diabolical device that looks
like a fairly humdrum memory stick a year ago. From the report: "The USB Killer
is shockingly simple in its operation. As soon as you plug it in, a DC-to-DC
converter starts drawing power from the host system and storing electricity in
its bank of capacitors (the square-shaped components). When the capacitors
reach a potential of -220V, the device dumps all of that electricity into the
USB data lines, most likely frying whatever is on the other end. If the host
doesn't just roll over and die, the USB stick does the charge-discharge process
again and again until it sizzles. Since the USB Killer has gone on sale, it has
been used to fry laptops (including an old ThinkPad and a brand new MacBook
Pro), an Xbox One, the new Google Pixel phone, and some cars (infotainment
units, rather than whole cars... for now). Notably, some devices fare better
than others, and there's a range of possible outcomes -- the USB Killer doesn't
just nuke everything completely." You can watch a video of EverythingApplePro
using the USB Killer to fry a variety of electronic devices. It looks like the
only real defense from the USB Killer is physically capping your ports.

[image 2][2][image 4][4][image 6][6]

Read more of this story[7] at Slashdot.
[image 8]

Links:
[1]: http://twitter.com/home?status=The+'USB+Killer'+Has+Been+Mass+Produced+--+Available+Online+For+About+%2450%3A+http%3A%2F%2Fbit.ly%2F2giPtNu (link)
[2]: https://a.fsdn.com/sd/twitter_icon_large.png (image)
[3]: http://www.facebook.com/sharer.php?u=https%3A%2F%2Fhardware.slashdot.org%2Fstory%2F16%2F12%2F02%2F2243225%2Fthe-usb-killer-has-been-mass-produced----available-online-for-about-50%3Futm_source%3Dslashdot%26utm_medium%3Dfacebook (link)
[4]: https://a.fsdn.com/sd/facebook_icon_large.png (image)
[5]: http://plus.google.com/share?url=https://hardware.slashdot.org/story/16/12/02/2243225/the-usb-killer-has-been-mass-produced----available-online-for-about-50?utm_source=slashdot&utm_medium=googleplus (link)
[6]: http://www.gstatic.com/images/icons/gplus-16.png (image)
[7]: https://hardware.slashdot.org/story/16/12/02/2243225/the-usb-killer-has-been-mass-produced----available-online-for-about-50?utm_source=rss1.0moreanon&utm_medium=feed (link)
[8]: http://feeds.feedburner.com/~r/Slashdot/slashdot/~4/hAudAdRP9oo (image)

[toc] | [next] | [standalone]

#12581

On 4/12/2016 3:36 AM, RS Wood wrote:
>  From the «plug into your ass for bonus points» department:
> Title: The 'USB Killer' Has Been Mass Produced -- Available Online For About $50
> Author: help@slashdot.org
> Date: Fri, 02 Dec 2016 20:25:00 -0500
> Link: http://rss.slashdot.org/~r/Slashdot/slashdot/~3/hAudAdRP9oo/the-usb-killer-has-been-mass-produced----available-online-for-about-50
>
> New submitter npslider writes: The "USB Killer," a USB stick that fries almost
> everything that it is plugged into, has been mass produced -- available online
> for about $50. Ars Technica first wrote about this diabolical device that looks
> like a fairly humdrum memory stick a year ago. From the report: "The USB Killer
> is shockingly simple in its operation. As soon as you plug it in, a DC-to-DC
> converter starts drawing power from the host system and storing electricity in
> its bank of capacitors (the square-shaped components). When the capacitors
> reach a potential of -220V, the device dumps all of that electricity into the
> USB data lines, most likely frying whatever is on the other end. If the host
> doesn't just roll over and die, the USB stick does the charge-discharge process
> again and again until it sizzles. Since the USB Killer has gone on sale, it has
> been used to fry laptops (including an old ThinkPad and a brand new MacBook
> Pro), an Xbox One, the new Google Pixel phone, and some cars (infotainment
> units, rather than whole cars... for now). Notably, some devices fare better
> than others, and there's a range of possible outcomes -- the USB Killer doesn't
> just nuke everything completely." You can watch a video of EverythingApplePro
> using the USB Killer to fry a variety of electronic devices. It looks like the
> only real defense from the USB Killer is physically capping your ports.

Or appropriately connect diodes to the data lines. If this device 
becomes widespread enough, manufacturers will start doing that on new 
hardware, particularly if people keep submitting warranty claims.

Sylvia.

[toc] | [prev] | [next] | [standalone]

#12582

with <eahhicFq6n7U1@mid.individual.net> Sylvia Else wrote:
> On 4/12/2016 3:36 AM, RS Wood wrote:

>> New submitter npslider writes: The "USB Killer," a USB stick that
>> fries almost everything that it is plugged into, has been mass
>> produced -- available online for about $50. Ars Technica first wrote
>> about this diabolical device that looks like a fairly humdrum memory
>> stick a year ago. From the report: "The USB Killer is shockingly
>> simple in its operation. As soon as you plug it in, a DC-to-DC
*SKIP*
> Or appropriately connect diodes to the data lines. If this device
> becomes widespread enough, manufacturers will start doing that on new
> hardware, particularly if people keep submitting warranty claims.

Somehow I believe pluging-in 220V isn't covered by any reasonable
warranty.  Personaly, I have some time to get some spare USB-Hub.

-- 
Torvalds' goal for Linux is very simple: World Domination
Stallman's goal for GNU is even simpler: Freedom

[toc] | [prev] | [next] | [standalone]

#12583

On 5/12/2016 1:11 AM, Eric Pozharski wrote:
> with <eahhicFq6n7U1@mid.individual.net> Sylvia Else wrote:
>> On 4/12/2016 3:36 AM, RS Wood wrote:
>
>>> New submitter npslider writes: The "USB Killer," a USB stick that
>>> fries almost everything that it is plugged into, has been mass
>>> produced -- available online for about $50. Ars Technica first wrote
>>> about this diabolical device that looks like a fairly humdrum memory
>>> stick a year ago. From the report: "The USB Killer is shockingly
>>> simple in its operation. As soon as you plug it in, a DC-to-DC
> *SKIP*
>> Or appropriately connect diodes to the data lines. If this device
>> becomes widespread enough, manufacturers will start doing that on new
>> hardware, particularly if people keep submitting warranty claims.
>
> Somehow I believe pluging-in 220V isn't covered by any reasonable
> warranty.  Personaly, I have some time to get some spare USB-Hub.
>

It probably isn't, but that won't stop people making warranty claims, 
and it's likely quite difficult to prove the exact cause. In any case, 
even processing warranty claims that are rejected costs money.

Sylvia.

[toc] | [prev] | [next] | [standalone]

#12584

On 12/04/2016 04:25 PM, Sylvia Else wrote:
> On 5/12/2016 1:11 AM, Eric Pozharski wrote:
>> with <eahhicFq6n7U1@mid.individual.net> Sylvia Else wrote:
>>> On 4/12/2016 3:36 AM, RS Wood wrote:
>>
>>>> New submitter npslider writes: The "USB Killer," a USB stick that
>>>> fries almost everything that it is plugged into, has been mass
>>>> produced -- available online for about $50. Ars Technica first wrote
>>>> about this diabolical device that looks like a fairly humdrum memory
>>>> stick a year ago. From the report: "The USB Killer is shockingly
>>>> simple in its operation. As soon as you plug it in, a DC-to-DC
>> *SKIP*
>>> Or appropriately connect diodes to the data lines. If this device
>>> becomes widespread enough, manufacturers will start doing that on new
>>> hardware, particularly if people keep submitting warranty claims.
>>
>> Somehow I believe pluging-in 220V isn't covered by any reasonable
>> warranty.  Personaly, I have some time to get some spare USB-Hub.
>>
>
> It probably isn't, but that won't stop people making warranty claims,
> and it's likely quite difficult to prove the exact cause. In any case,
> even processing warranty claims that are rejected costs money.

I have to wonder about the LEGITIMATE use for such a thing...

-- 
Cheers, Bev
    There is no such thing as a foolproof device
    because fools are so ingenious.

[toc] | [prev] | [next] | [standalone]

#12585

I'd have to imagine every possible LEGIMITATE use for this thing is
ultimately nefarious.  But the possibilities for doing productive harm
are as boundless as human stupidity...

[toc] | [prev] | [next] | [standalone]

#12586

On 6/12/2016 3:27 AM, The Real Bev wrote:
> On 12/04/2016 04:25 PM, Sylvia Else wrote:
>> On 5/12/2016 1:11 AM, Eric Pozharski wrote:
>>> with <eahhicFq6n7U1@mid.individual.net> Sylvia Else wrote:
>>>> On 4/12/2016 3:36 AM, RS Wood wrote:
>>>
>>>>> New submitter npslider writes: The "USB Killer," a USB stick that
>>>>> fries almost everything that it is plugged into, has been mass
>>>>> produced -- available online for about $50. Ars Technica first wrote
>>>>> about this diabolical device that looks like a fairly humdrum memory
>>>>> stick a year ago. From the report: "The USB Killer is shockingly
>>>>> simple in its operation. As soon as you plug it in, a DC-to-DC
>>> *SKIP*
>>>> Or appropriately connect diodes to the data lines. If this device
>>>> becomes widespread enough, manufacturers will start doing that on new
>>>> hardware, particularly if people keep submitting warranty claims.
>>>
>>> Somehow I believe pluging-in 220V isn't covered by any reasonable
>>> warranty.  Personaly, I have some time to get some spare USB-Hub.
>>>
>>
>> It probably isn't, but that won't stop people making warranty claims,
>> and it's likely quite difficult to prove the exact cause. In any case,
>> even processing warranty claims that are rejected costs money.
>
> I have to wonder about the LEGITIMATE use for such a thing...
>
Testing device protection against this?

Sylvia.

[toc] | [prev] | [next] | [standalone]

#12587

On 2016-12-06, Sylvia Else <sylvia@not.at.this.address> wrote:
> On 6/12/2016 3:27 AM, The Real Bev wrote:
>> On 12/04/2016 04:25 PM, Sylvia Else wrote:
>>> On 5/12/2016 1:11 AM, Eric Pozharski wrote:
>>>> with <eahhicFq6n7U1@mid.individual.net> Sylvia Else wrote:
>>>>> On 4/12/2016 3:36 AM, RS Wood wrote:
>>>>
>>>>>> New submitter npslider writes: The "USB Killer," a USB stick that
>>>>>> fries almost everything that it is plugged into, has been mass
>>>>>> produced -- available online for about $50. Ars Technica first wrote
>>>>>> about this diabolical device that looks like a fairly humdrum memory
>>>>>> stick a year ago. From the report: "The USB Killer is shockingly
>>>>>> simple in its operation. As soon as you plug it in, a DC-to-DC
>>>> *SKIP*
>>>>> Or appropriately connect diodes to the data lines. If this device
>>>>> becomes widespread enough, manufacturers will start doing that on new
>>>>> hardware, particularly if people keep submitting warranty claims.
>>>>
>>>> Somehow I believe pluging-in 220V isn't covered by any reasonable
>>>> warranty.  Personaly, I have some time to get some spare USB-Hub.
>>>>
>>>
>>> It probably isn't, but that won't stop people making warranty claims,
>>> and it's likely quite difficult to prove the exact cause. In any case,
>>> even processing warranty claims that are rejected costs money.
>>
>> I have to wonder about the LEGITIMATE use for such a thing...
>>
> Testing device protection against this?
>

I got my first stereo receiver in 1974 and by then there was protection
against speaker cables becoming disconnected or shorting out.

IOW the idea is not new.

--
tar: Cowardly refusing to create an empty archive

[toc] | [prev] | [next] | [standalone]

#12588

On 6/12/2016 7:24 PM, Paul Sture wrote:
> On 2016-12-06, Sylvia Else <sylvia@not.at.this.address> wrote:
>> On 6/12/2016 3:27 AM, The Real Bev wrote:
>>> On 12/04/2016 04:25 PM, Sylvia Else wrote:
>>>> On 5/12/2016 1:11 AM, Eric Pozharski wrote:
>>>>> with <eahhicFq6n7U1@mid.individual.net> Sylvia Else wrote:
>>>>>> On 4/12/2016 3:36 AM, RS Wood wrote:
>>>>>
>>>>>>> New submitter npslider writes: The "USB Killer," a USB stick that
>>>>>>> fries almost everything that it is plugged into, has been mass
>>>>>>> produced -- available online for about $50. Ars Technica first wrote
>>>>>>> about this diabolical device that looks like a fairly humdrum memory
>>>>>>> stick a year ago. From the report: "The USB Killer is shockingly
>>>>>>> simple in its operation. As soon as you plug it in, a DC-to-DC
>>>>> *SKIP*
>>>>>> Or appropriately connect diodes to the data lines. If this device
>>>>>> becomes widespread enough, manufacturers will start doing that on new
>>>>>> hardware, particularly if people keep submitting warranty claims.
>>>>>
>>>>> Somehow I believe pluging-in 220V isn't covered by any reasonable
>>>>> warranty.  Personaly, I have some time to get some spare USB-Hub.
>>>>>
>>>>
>>>> It probably isn't, but that won't stop people making warranty claims,
>>>> and it's likely quite difficult to prove the exact cause. In any case,
>>>> even processing warranty claims that are rejected costs money.
>>>
>>> I have to wonder about the LEGITIMATE use for such a thing...
>>>
>> Testing device protection against this?
>>
>
> I got my first stereo receiver in 1974 and by then there was protection
> against speaker cables becoming disconnected or shorting out.
>
> IOW the idea is not new.
>
> --
> tar: Cowardly refusing to create an empty archive
>

Still those problems happened by accident. I suppose some self-powered 
USB devices might have had faults that could lead them to apply high 
voltages to USB ports, but it's not very likely, given that such faults 
could also be dangerous to humans. The designers of the USB spec were 
hardly remiss in failing to realise that someone might do it deliberately.

Sylvia.

[toc] | [prev] | [next] | [standalone]

#12601

with <eanjd8F9nh4U1@mid.individual.net> Sylvia Else wrote:
> On 6/12/2016 7:24 PM, Paul Sture wrote:

*SKIP*
>> I got my first stereo receiver in 1974 and by then there was
>> protection against speaker cables becoming disconnected or shorting
>> out.
>>
>> IOW the idea is not new.
*SKIP*
> Still those problems happened by accident. I suppose some self-powered
> USB devices might have had faults that could lead them to apply high
> voltages to USB ports, but it's not very likely,

Count me in (Praise RNG!), I've had (it's disassembled now) an enclosure
that burned USB host on MB it was connected to.  Yes, it was powered
externally.

> given that such faults could also be dangerous to humans.

And...

> The designers of the USB spec were hardly remiss in failing to realise
> that someone might do it deliberately.

My take is, if those "designers" could be held liable then they would
care.  And as usual otherwise.  What makes me believe, that the
manufacturer of above mentioned stereo receiver could be held liable so
they mitigated risks.

Well, the world was different back then.

-- 
Torvalds' goal for Linux is very simple: World Domination
Stallman's goal for GNU is even simpler: Freedom

[toc] | [prev] | [next] | [standalone]

#12609

RS Wood quoted:

> "The USB Killer is shockingly simple in its operation. As soon as you
> plug it in, a DC-to-DC converter starts drawing power from the host
> system and storing electricity in its bank of capacitors (the
> square-shaped components). When the capacitors reach a potential of
> -220V, the device dumps all of that electricity into the USB data
> lines"

You could use a USB Condom (now known as a SyncStop) to isolate the data 
pins, no doubt the USB Killer II will send the high voltage back on the 
5V rail

<http://syncstop.com/#faq-original>

[toc] | [prev] | [standalone]

Back to top | Article view | comp.misc

csiph-web