Welcome to DU! The truly grassroots left-of-center political community where regular people, not algorithms, drive the discussions and set the standards. Join the community: Create a free account Support DU (and get rid of ads!): Become a Star Member Latest Breaking News General Discussion The DU Lounge All Forums Issue Forums Culture Forums Alliance Forums Region Forums Support Forums Help & Search

C Moon

(12,221 posts)
Mon Apr 10, 2023, 04:25 PM Apr 2023

Don't Use Public Phone Charging Stations: FBI

Source: The Hill

The FBI is warning people to not use public phone charging stations, which have become increasingly popular in places like airports and shopping malls.

The problem is that hackers have found a way to introduce malware and other software onto devices through the public stations, the FBI said.

“Avoid using free charging stations in airports, hotels or shopping centers,” the FBI’s Denver Twitter account said. “Bad actors have figured out ways to use public USB ports to introduce malware and monitoring software onto devices. Carry your own charger and USB cord and use an electrical outlet instead.”

Read more: https://thehill.com/policy/technology/3942399-dont-use-public-phone-charging-stations-fbi/

55 replies = new reply since forum marked as read
Highlight: NoneDon't highlight anything 5 newestHighlight 5 most recent replies
Don't Use Public Phone Charging Stations: FBI (Original Post) C Moon Apr 2023 OP
I've been warning about the BadUSB malware for a few years. erronis Apr 2023 #1
Whaaa?! JudyM Apr 2023 #28
Good info. Thanks. underpants Apr 2023 #2
That's kind of gnarly Shermann Apr 2023 #3
100% why I carry an Anker backup with me when I travel... EarthFirst Apr 2023 #4
Doesn't protect against the backup device itself being the malware. erronis Apr 2023 #9
TY.. what can people do who Cha Apr 2023 #5
Something like this... Lars39 Apr 2023 #7
+1 Auggie Apr 2023 #8
i use these barbtries Apr 2023 #15
We use those too. Lars39 Apr 2023 #23
and little bags to put them in. barbtries Apr 2023 #24
Yep Lars39 Apr 2023 #26
I have one like that; I keep a little LED light with mine: sl8 Apr 2023 #30
that is a USB light and not a charger Layzeebeaver Apr 2023 #38
I have a power bank like the one of the person I was was responding to sl8 Apr 2023 #41
TY! Cha Apr 2023 #21
With digitial camera batteries, a tablet, and a Wifi hotspot as well as a phone to keep charged Rocknation Apr 2023 #22
This is $10 more and can start a car. Mosby Apr 2023 #42
This message was self-deleted by its author Rocknation Apr 2023 #43
You can plug a USB splitter or small hub into it ExWhoDoesntCare Apr 2023 #50
Charge every night before you go to sleep Polybius Apr 2023 #31
Power drainage depends on how you use it ExWhoDoesntCare Apr 2023 #51
"It's usually not a good idea to charge your phone if it has 60 percent juice or more" Polybius Apr 2023 #55
When possible, I charge my iPhone through my laptop. cab67 Apr 2023 #46
There are "dumb plugs" which only pass power (only the power pins are active). keep_left Apr 2023 #6
Thats a good option, as long as you can trust the "dump plugs" erronis Apr 2023 #10
I think that the data pins are actually missing on the "dumb plugs", though I'd have to look... keep_left Apr 2023 #13
You are probably right - as long as the dumb plugs are playing by the rules. erronis Apr 2023 #14
Yes, that's correct. Before buying them myself, I would check... keep_left Apr 2023 #16
Thanks. Almost no Amazon reviewer would know or bother to check this. erronis Apr 2023 #18
Is this the sort of thing you mean? GopherGal Apr 2023 #12
Yes, I believe so. I remember the red color in particular. keep_left Apr 2023 #19
Thanks for that link. Maybe. I'm still skeptical of any device, made in USA/UK/China erronis Apr 2023 #20
"or buy a charging-only cable, which does not allow the transfer of information" LiberalLovinLug Apr 2023 #11
That was my question. Igel Apr 2023 #27
Yeah well, as far as I know, data is not exchanged through a simple wall plug. LiberalLovinLug Apr 2023 #29
I believe you're correct: "Avoid using charging stations in airports, hotels or shopping centers... C Moon Apr 2023 #32
I bought this for travel. I haven't used it yet. sinkingfeeling Apr 2023 #17
Is there any good thing that can't be hacked? marbley falls Apr 2023 #25
Everyone on this post needs to know that a USB device can be malware erronis Apr 2023 #33
Wow! Thanks! C Moon Apr 2023 #34
The fbi dislikes others horning in on their spying? niyad Apr 2023 #35
LOL! C Moon Apr 2023 #37
Carry a power bank vercetti2021 Apr 2023 #36
"Juice Jacking" ??? Layzeebeaver Apr 2023 #39
This can charge my laptop, too. mia Apr 2023 #40
What about public libraries. ShazzieB Apr 2023 #44
I would recommend bringing a USB wall charger and plugging it into an outlet. C Moon Apr 2023 #48
I was afraid of that! ShazzieB Apr 2023 #53
Public Phone Charging Station. msfiddlestix Apr 2023 #45
LOL! C Moon Apr 2023 #47
I don't have an electric vehicle, but when I get one, is it proper ... JustABozoOnThisBus Apr 2023 #54
Never trusted them because it was obvious ExWhoDoesntCare Apr 2023 #49
+1 C Moon Apr 2023 #52

erronis

(15,371 posts)
1. I've been warning about the BadUSB malware for a few years.
Mon Apr 10, 2023, 04:35 PM
Apr 2023
https://en.wikipedia.org/wiki/BadUSB

Based on the limited reporting on this malware it's not clear whether this is an exploit using BadUSB.

Basically, all USB drives (thumb, disk, cameras, audio, everything) use a model where the external device tells the host (PC, phone, tablet, etc.) what it is. Usually it says the right thing. But it can also call itself a keyboard and once plugged in, can start transmitting commands via whatever shell the device supports. These commands can basically take over the host. After inoculation the USB device reverts to its assumed state.

Windows has no protection against this at all. I don't know about other operating systems but guessing not much better.

Almost all USB dongles are made in China. There are no ways of testing these devices without deep tools/physically inspecting their nanometer innards. Anyone think China would want to be able to control much/most of the US remotely?

Shermann

(7,451 posts)
3. That's kind of gnarly
Mon Apr 10, 2023, 04:38 PM
Apr 2023

Most devices support "USB restricted mode" which blocks access to the device over USB when the screen is locked. However, in this case the user is likely to unlock the screen to use the device while charging. That's not so easy to deal with.

barbtries

(28,811 posts)
24. and little bags to put them in.
Mon Apr 10, 2023, 06:25 PM
Apr 2023

I've bought really cheap chargers in the past but these are worth the extra.

Layzeebeaver

(1,644 posts)
38. that is a USB light and not a charger
Tue Apr 11, 2023, 03:06 AM
Apr 2023

I have one also - very handy.

But it's not a charger. It does the exact opposite.

sl8

(13,929 posts)
41. I have a power bank like the one of the person I was was responding to
Tue Apr 11, 2023, 05:21 AM
Apr 2023

I keep a little LED light with it.

Look at Barbtries post.

Rocknation

(44,580 posts)
22. With digitial camera batteries, a tablet, and a Wifi hotspot as well as a phone to keep charged
Mon Apr 10, 2023, 06:13 PM
Apr 2023

Last edited Wed Sep 27, 2023, 03:20 PM - Edit history (1)

I pack a one-pound, multi USB-port "heater," LOL (https://amzn.to/46jf958)




Rocknation

Response to Mosby (Reply #42)

Polybius

(15,498 posts)
31. Charge every night before you go to sleep
Mon Apr 10, 2023, 09:01 PM
Apr 2023

Even during heavy, heavy use, it's never under 45% by the next night.

 

ExWhoDoesntCare

(4,741 posts)
51. Power drainage depends on how you use it
Thu Apr 13, 2023, 01:44 AM
Apr 2023

Some apps are power hogs, and will kill your phone in no time. So it's not a guarantee that it will be 45% the next night.

It's usually not a good idea to charge your phone if it has 60 percent juice or more. The battery actually loses some of its integrity each time it's attached to the charger, so it's better to let it drain down to around 40% before charging again. Once you hook it up, it's also best to leave it hooked up until the power level is at least 80%. Don't take it off the charger and put it back on if you need to use the phone. Leave it plugged in to at least 80% and then let it drain down to 40% again, or your battery will start dying sooner.

Polybius

(15,498 posts)
55. "It's usually not a good idea to charge your phone if it has 60 percent juice or more"
Thu Apr 13, 2023, 12:11 PM
Apr 2023

That was true in 2003. Back then overcharge killed the battery. Today though, every major brand has a shut-off mechanism to prevent from overcharging. I've been doing this for 20 years with no problems, and don't take it off until I wake up. If my day doesn't start at 100%, I'm not happy.

As for some apps being power hogs, that's true. Thankfully Facebook, Instagram, and Chrome sure aren't, as I'm on them all day.

cab67

(3,010 posts)
46. When possible, I charge my iPhone through my laptop.
Wed Apr 12, 2023, 09:50 AM
Apr 2023

Most airports that provide USB ports also provide electrical outlets. I plug my laptop in, then plug my iPhone to my laptop.

One can also get a plug-in USB charger that goes straight into the outlet.

keep_left

(1,792 posts)
6. There are "dumb plugs" which only pass power (only the power pins are active).
Mon Apr 10, 2023, 04:55 PM
Apr 2023

I remember seeing these at the AAA store where they are popular with travelers for the reasons cited in the article. This is apparently not a new problem, but it must be getting worse.

The "dumb plugs" go between your device and the charger to interrupt any data path and only allow power for charging a device.

erronis

(15,371 posts)
10. Thats a good option, as long as you can trust the "dump plugs"
Mon Apr 10, 2023, 05:09 PM
Apr 2023

They can be subverted by the manufacturer. Says "Dumb Plug" on the packaging, says "Dump User" on the malware.
https://www.democraticunderground.com/10143058169#post1

keep_left

(1,792 posts)
13. I think that the data pins are actually missing on the "dumb plugs", though I'd have to look...
Mon Apr 10, 2023, 05:21 PM
Apr 2023

...again to check that. USB has dedicated power pins, and so they can omit the data pins while still allowing a power connection for charging. The ones I saw look a little like the USB adapters for changing connectors (type A to type B, etc.). They aren't cables; they just attach to the USB connector from your phone or whatever and interrupt the data path. Next time I'm traveling I'll have to take another look at them. I know that I saw them at the AAA travel store.

erronis

(15,371 posts)
14. You are probably right - as long as the dumb plugs are playing by the rules.
Mon Apr 10, 2023, 05:36 PM
Apr 2023

If you do check on the actual activated pins, please let us know.

keep_left

(1,792 posts)
16. Yes, that's correct. Before buying them myself, I would check...
Mon Apr 10, 2023, 05:41 PM
Apr 2023

...to see if Amazon or another retailer that has online reviews carries the same "dumb plugs" I saw at the AAA travel store. Usually the reviewers for these kinds of things on Amazon are pretty thorough. Like I said, I think I saw that only the two power pins were present on the plugs, but it's been a while and my memory isn't what it used to be.

erronis

(15,371 posts)
18. Thanks. Almost no Amazon reviewer would know or bother to check this.
Mon Apr 10, 2023, 05:46 PM
Apr 2023

The new USB-C and Thunderbolt plugs are probably way too small for most home hobbyists to be able to sample.

Since there can be actually processing within the plug and/or the cable, it might not even be possible to check for continuity if the internal processing detects that type of sampling.

Fun world we live in!!!

keep_left

(1,792 posts)
19. Yes, I believe so. I remember the red color in particular.
Mon Apr 10, 2023, 05:47 PM
Apr 2023

It appears that you can see reasonably well in the product pictures that the data pins are missing on those plugs, which of course is what you want to interrupt any data path to your device.

erronis

(15,371 posts)
20. Thanks for that link. Maybe. I'm still skeptical of any device, made in USA/UK/China
Mon Apr 10, 2023, 05:51 PM
Apr 2023

That can plug into a port and take control of the machine.

The fault lies with the operating system and hardware manufacturers that let a rogue device take over. It shouldn't be "solved" by a dongle which we might not trust either.

LiberalLovinLug

(14,178 posts)
11. "or buy a charging-only cable, which does not allow the transfer of information"
Mon Apr 10, 2023, 05:18 PM
Apr 2023

Uh.........Is anyone asking why these charging ports allow the "transfer of information"?

No need for any public charging station to not simply be a 5 amp ubs power supply. I've never seen one of these stations. I can only guess that money is involved. Specifically, they probably have deals with commercial enterprises to feed ads to you, in exchange for the charge. A way the airport pays for them, so they don't have to actually pay out of their own pockets to help out their travelling customers.

Igel

(35,362 posts)
27. That was my question.
Mon Apr 10, 2023, 07:00 PM
Apr 2023

I have a charging station in my classroom. It gets the phones off the desks of the "power users"--I confiscate power blocks plugged into *my* power strips and direct them to the One True Source.

School provides me with no surge protectors or power bars. The station handles up to 12, and you know, it's just plugged into the power outlet and has no ROM.

I have to wonder how many people use their phones while charging, though. But you may be right. Haven't flown since ... 2010?

LiberalLovinLug

(14,178 posts)
29. Yeah well, as far as I know, data is not exchanged through a simple wall plug.
Mon Apr 10, 2023, 08:56 PM
Apr 2023

Otherwise anytime we charged our phones from an out of house socket, we'd be at risk. (or even I suppose, in our own home outlets)

These have to be systems that have some kind of kiosk, and software (easily hacked apparently) running them to guide you, and probably feed you an ad or two.

All we need is a row of freakin wall plugs with built in ubs female plugins. or if possible, a male plug you can maybe pull out and retract when done.

But since its not that apparently, I can only guess it has something to do with money as usual.

C Moon

(12,221 posts)
32. I believe you're correct: "Avoid using charging stations in airports, hotels or shopping centers...
Mon Apr 10, 2023, 09:03 PM
Apr 2023

"...Carry your own charger and USB cord and use an electrical outlet instead."

From L.A. Times (same article, different website).

erronis

(15,371 posts)
33. Everyone on this post needs to know that a USB device can be malware
Mon Apr 10, 2023, 09:26 PM
Apr 2023

Just plugging it into a PC, Mac, iPhone, Android, tablet, etc.

This is one of the reasons why government agencies actually disable USB ports. Sometimes physically removing the connections to the motherboard, or super-gluing the sockets.

Don't pick up a shiny USB thumb drive you see near your place of work and plug it in. It will likely get you in a lot of trouble.

https://en.wikipedia.org/wiki/BadUSB

Layzeebeaver

(1,644 posts)
39. "Juice Jacking" ???
Tue Apr 11, 2023, 03:08 AM
Apr 2023

Who was the ignoramus that came up with that title?

Makes it sound like a Porno. Not that there's anything wrong with that...

(apologies for the Seinfeld reference)

ShazzieB

(16,541 posts)
44. What about public libraries.
Wed Apr 12, 2023, 06:39 AM
Apr 2023

Most of the public libraries around here have phone charging stations. Are those no good as well?

C Moon

(12,221 posts)
48. I would recommend bringing a USB wall charger and plugging it into an outlet.
Thu Apr 13, 2023, 12:43 AM
Apr 2023

I'll never use public chargers again.
Maybe leave one in your vehicle.

ShazzieB

(16,541 posts)
53. I was afraid of that!
Thu Apr 13, 2023, 04:29 AM
Apr 2023

I need to get a USB wall charger. I haven't had to plug a charger into the wall at home in quite a while, since I got a lamp that has USB charging ports built into it.

msfiddlestix

(7,286 posts)
45. Public Phone Charging Station.
Wed Apr 12, 2023, 09:31 AM
Apr 2023

I read that title to mean: Public Phone (Booths) used for Charging Vehicles.



s/b Cell Phone Charging stations?

yeah, I'm old as dirt, and public phone booths had been a thing everywhere.



JustABozoOnThisBus

(23,371 posts)
54. I don't have an electric vehicle, but when I get one, is it proper ...
Thu Apr 13, 2023, 08:55 AM
Apr 2023

... to park at the public charging station and see if anyone left a quarter in the change slot?

Cha-ching!

 

ExWhoDoesntCare

(4,741 posts)
49. Never trusted them because it was obvious
Thu Apr 13, 2023, 01:32 AM
Apr 2023

That criminals could hack into them.

I've always brought along one of those little USB plug chargers, and any cords I'd need for devices when I'm on the go, either short-term or long. Have a mini-case that holds the charger and cords, and it easily fits in a purse or the small device pocket of my backpack, when I was a late-life student.

The availability of public power outlets is rather astounding. I'm always finding them in the most unexpected places.

Latest Discussions»Latest Breaking News»Don't Use Public Phone Ch...