full-disclosure - Re: Cellphone with USB host

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Sat, 10 Oct 2009 12:18:35 -0400
From: Valdis.Kletnieks@...edu
To: Mohammad Hosein <mhtajik@...il.com>
Cc: full-disclosure@...ts.grok.org.uk
Subject: Re: Cellphone with USB host

On Sat, 10 Oct 2009 17:39:38 +0330, Mohammad Hosein said:
> capable of that too ? like the new HTC phones featuring Android .
>  "why are you so focused on cellphones only?"
> you've got ideas to stole an enterprise owned information from their USB
> disks when you are physically there visiting as a guest ?share them with us
> please .

My guess is that there are many places with security desks that will let
a cell phone pass because they don't realize that attack is doable with
the phone.

If the USB memory device is a stick, maybe just pocketing it is a better bet.
And if it's a full-size rotating-media disk, it's probably a lot higher
capacity than the cell phone, which probably doesn't have *that* much storage,
so you need to be picking and choosing what to take - and the small screen on
the phone makes browsing difficult.

So guys - what would be the ideal corporate-espionage device, and what's
the best approximation currently on the market?

Content of type "application/pgp-signature" skipped

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/