Don't Use Public Phone Charging Stations: FBI
Source: The Hill
The FBI is warning people to not use public phone charging stations, which have become increasingly popular in places like airports and shopping malls.
The problem is that hackers have found a way to introduce malware and other software onto devices through the public stations, the FBI said.
Avoid using free charging stations in airports, hotels or shopping centers, the FBIs Denver Twitter account said. Bad actors have figured out ways to use public USB ports to introduce malware and monitoring software onto devices. Carry your own charger and USB cord and use an electrical outlet instead.
Read more: https://thehill.com/policy/technology/3942399-dont-use-public-phone-charging-stations-fbi/
erronis
(15,371 posts)Based on the limited reporting on this malware it's not clear whether this is an exploit using BadUSB.
Basically, all USB drives (thumb, disk, cameras, audio, everything) use a model where the external device tells the host (PC, phone, tablet, etc.) what it is. Usually it says the right thing. But it can also call itself a keyboard and once plugged in, can start transmitting commands via whatever shell the device supports. These commands can basically take over the host. After inoculation the USB device reverts to its assumed state.
Windows has no protection against this at all. I don't know about other operating systems but guessing not much better.
Almost all USB dongles are made in China. There are no ways of testing these devices without deep tools/physically inspecting their nanometer innards. Anyone think China would want to be able to control much/most of the US remotely?
underpants
(182,922 posts)Shermann
(7,451 posts)Most devices support "USB restricted mode" which blocks access to the device over USB when the screen is locked. However, in this case the user is likely to unlock the screen to use the device while charging. That's not so easy to deal with.
EarthFirst
(2,905 posts)Ive never trusted these.
erronis
(15,371 posts)Cha
(297,763 posts)need to recharge their phones while out and about?
Lars39
(26,117 posts)barbtries
(28,811 posts)i actually have 3 from when i was traveling for work. they've been very handy.
Lars39
(26,117 posts)Even got short charging cords to go with them
barbtries
(28,811 posts)I've bought really cheap chargers in the past but these are worth the extra.
sl8
(13,929 posts)Layzeebeaver
(1,644 posts)I have one also - very handy.
But it's not a charger. It does the exact opposite.
sl8
(13,929 posts)I keep a little LED light with it.
Look at Barbtries post.
Rocknation
(44,580 posts)Last edited Wed Sep 27, 2023, 03:20 PM - Edit history (1)
I pack a one-pound, multi USB-port "heater," LOL (https://amzn.to/46jf958)
Rocknation
Mosby
(16,375 posts)Response to Mosby (Reply #42)
Rocknation This message was self-deleted by its author.
ExWhoDoesntCare
(4,741 posts)And get multiple devices powered up.
Polybius
(15,498 posts)Even during heavy, heavy use, it's never under 45% by the next night.
ExWhoDoesntCare
(4,741 posts)Some apps are power hogs, and will kill your phone in no time. So it's not a guarantee that it will be 45% the next night.
It's usually not a good idea to charge your phone if it has 60 percent juice or more. The battery actually loses some of its integrity each time it's attached to the charger, so it's better to let it drain down to around 40% before charging again. Once you hook it up, it's also best to leave it hooked up until the power level is at least 80%. Don't take it off the charger and put it back on if you need to use the phone. Leave it plugged in to at least 80% and then let it drain down to 40% again, or your battery will start dying sooner.
Polybius
(15,498 posts)That was true in 2003. Back then overcharge killed the battery. Today though, every major brand has a shut-off mechanism to prevent from overcharging. I've been doing this for 20 years with no problems, and don't take it off until I wake up. If my day doesn't start at 100%, I'm not happy.
As for some apps being power hogs, that's true. Thankfully Facebook, Instagram, and Chrome sure aren't, as I'm on them all day.
cab67
(3,010 posts)Most airports that provide USB ports also provide electrical outlets. I plug my laptop in, then plug my iPhone to my laptop.
One can also get a plug-in USB charger that goes straight into the outlet.
keep_left
(1,792 posts)I remember seeing these at the AAA store where they are popular with travelers for the reasons cited in the article. This is apparently not a new problem, but it must be getting worse.
The "dumb plugs" go between your device and the charger to interrupt any data path and only allow power for charging a device.
erronis
(15,371 posts)They can be subverted by the manufacturer. Says "Dumb Plug" on the packaging, says "Dump User" on the malware.
https://www.democraticunderground.com/10143058169#post1
keep_left
(1,792 posts)...again to check that. USB has dedicated power pins, and so they can omit the data pins while still allowing a power connection for charging. The ones I saw look a little like the USB adapters for changing connectors (type A to type B, etc.). They aren't cables; they just attach to the USB connector from your phone or whatever and interrupt the data path. Next time I'm traveling I'll have to take another look at them. I know that I saw them at the AAA travel store.
erronis
(15,371 posts)If you do check on the actual activated pins, please let us know.
keep_left
(1,792 posts)...to see if Amazon or another retailer that has online reviews carries the same "dumb plugs" I saw at the AAA travel store. Usually the reviewers for these kinds of things on Amazon are pretty thorough. Like I said, I think I saw that only the two power pins were present on the plugs, but it's been a while and my memory isn't what it used to be.
erronis
(15,371 posts)The new USB-C and Thunderbolt plugs are probably way too small for most home hobbyists to be able to sample.
Since there can be actually processing within the plug and/or the cable, it might not even be possible to check for continuity if the internal processing detects that type of sampling.
Fun world we live in!!!
GopherGal
(2,010 posts)keep_left
(1,792 posts)It appears that you can see reasonably well in the product pictures that the data pins are missing on those plugs, which of course is what you want to interrupt any data path to your device.
erronis
(15,371 posts)That can plug into a port and take control of the machine.
The fault lies with the operating system and hardware manufacturers that let a rogue device take over. It shouldn't be "solved" by a dongle which we might not trust either.
LiberalLovinLug
(14,178 posts)Uh.........Is anyone asking why these charging ports allow the "transfer of information"?
No need for any public charging station to not simply be a 5 amp ubs power supply. I've never seen one of these stations. I can only guess that money is involved. Specifically, they probably have deals with commercial enterprises to feed ads to you, in exchange for the charge. A way the airport pays for them, so they don't have to actually pay out of their own pockets to help out their travelling customers.
Igel
(35,362 posts)I have a charging station in my classroom. It gets the phones off the desks of the "power users"--I confiscate power blocks plugged into *my* power strips and direct them to the One True Source.
School provides me with no surge protectors or power bars. The station handles up to 12, and you know, it's just plugged into the power outlet and has no ROM.
I have to wonder how many people use their phones while charging, though. But you may be right. Haven't flown since ... 2010?
LiberalLovinLug
(14,178 posts)Otherwise anytime we charged our phones from an out of house socket, we'd be at risk. (or even I suppose, in our own home outlets)
These have to be systems that have some kind of kiosk, and software (easily hacked apparently) running them to guide you, and probably feed you an ad or two.
All we need is a row of freakin wall plugs with built in ubs female plugins. or if possible, a male plug you can maybe pull out and retract when done.
But since its not that apparently, I can only guess it has something to do with money as usual.
C Moon
(12,221 posts)"...Carry your own charger and USB cord and use an electrical outlet instead."
From L.A. Times (same article, different website).
sinkingfeeling
(51,477 posts)marbley falls
(11 posts)erronis
(15,371 posts)Just plugging it into a PC, Mac, iPhone, Android, tablet, etc.
This is one of the reasons why government agencies actually disable USB ports. Sometimes physically removing the connections to the motherboard, or super-gluing the sockets.
Don't pick up a shiny USB thumb drive you see near your place of work and plug it in. It will likely get you in a lot of trouble.
https://en.wikipedia.org/wiki/BadUSB
C Moon
(12,221 posts)niyad
(113,591 posts)vercetti2021
(10,156 posts)Inexpensive and easy to carry
Layzeebeaver
(1,644 posts)Who was the ignoramus that came up with that title?
Makes it sound like a Porno. Not that there's anything wrong with that...
(apologies for the Seinfeld reference)
mia
(8,363 posts)Thinking of getting another one for hurricane season.
https://www.amazon.com/dp/B08VDJP7WN?psc=1&ref=ppx_yo2ov_dt_b_product_details
ShazzieB
(16,541 posts)Most of the public libraries around here have phone charging stations. Are those no good as well?
C Moon
(12,221 posts)I'll never use public chargers again.
Maybe leave one in your vehicle.
ShazzieB
(16,541 posts)I need to get a USB wall charger. I haven't had to plug a charger into the wall at home in quite a while, since I got a lamp that has USB charging ports built into it.
msfiddlestix
(7,286 posts)I read that title to mean: Public Phone (Booths) used for Charging Vehicles.
s/b Cell Phone Charging stations?
yeah, I'm old as dirt, and public phone booths had been a thing everywhere.
C Moon
(12,221 posts)JustABozoOnThisBus
(23,371 posts)... to park at the public charging station and see if anyone left a quarter in the change slot?
Cha-ching!
ExWhoDoesntCare
(4,741 posts)That criminals could hack into them.
I've always brought along one of those little USB plug chargers, and any cords I'd need for devices when I'm on the go, either short-term or long. Have a mini-case that holds the charger and cords, and it easily fits in a purse or the small device pocket of my backpack, when I was a late-life student.
The availability of public power outlets is rather astounding. I'm always finding them in the most unexpected places.