tldrdailynews.com logo
Tag

Usb

All articles tagged with #usb

Unpatchable USB flaw targets Apple SecureROM on A12/A13 chips
security21 days ago

Unpatchable USB flaw targets Apple SecureROM on A12/A13 chips

Paradigm Shift disclosed usbliter8, a hardware-level exploit that can execute code inside Apple’s SecureROM on A12/A13 by abusing a USB controller DMA bug; it requires physical access, DFU mode, and a dedicated RP2350-based board, and cannot be fixed by firmware, making it effectively unpatchable on affected devices (A12/A13/S4/S5). The public PoC covers iPhone XS/XS Max/XR, iPhone 11 line, iPad Air 3, iPad mini 5, iPad 8th gen, Apple Watch Series 4/5, and HomePod mini; A14+ appear safe. No Secure Enclave compromise reported and no CVE yet; for most users risk is low, but in high-security environments it creates a hardware boundary problem requiring device retirement or strict custody controls.

via The Hacker News|
#apple#hardware-vulnerability#secureboot
USBLITER8: Unpatchable USB flaw hits Apple devices with A12/A13 chips
technology22 days ago

USBLITER8: Unpatchable USB flaw hits Apple devices with A12/A13 chips

A Paradigm Shift report warns of 'usbliter8', a hardware/firmware USB flaw that affects Apple devices with A12/A13 and S4/S5 chips (including iPhone XR through iPhone 11 lineup, iPad Air 3/mini 5/8, Apple TV 4K gen 2, Studio Display, and Apple Watch Series 4–SE) and is described as unpatchable. In DFU mode, a USB data sequence can force the controller to write to the wrong memory, letting an attacker inject code before iOS boots and bypass signature checks, while the Security Enclave remains safe. Apple reportedly worked with researchers on a fix, but the safest defense is upgrading to a newer device; older A11 devices do not appear affected.

via GSMArena.com|
#apple#dfu-mode#technology
Hack Me Through the Speaker: BLE Flaw Lets Firmware Takeover
technology1 month ago

Hack Me Through the Speaker: BLE Flaw Lets Firmware Takeover

A Creative Sound Blaster sound bar exposes a Bluetooth Low Energy interface that requires no authentication, enabling a nearby attacker to send commands and even reflash the device’s firmware to act as a USB keyboard, potentially compromising the host system. While USB commands require authentication, the BLE path does not, making proximity access enough for exploitation. The finding highlights BLE as a common vulnerability in consumer electronics and suggests air-gapping or securing edge devices like speakers.

via Hackaday|
#bluetooth#firmware#security
Rescuing Old Gadgets: Retrieve Your Music and Photos
technology5 months ago

Rescuing Old Gadgets: Retrieve Your Music and Photos

This guide explains how to recover data from aging devices such as iPods and digital cameras. It covers locating and matching the right cables or adapters (including USB, USB-C hubs, or FireWire), using manual or drag-and-drop transfer to avoid automatic syncing that could erase files, and leveraging third-party software (iExplorer, iMazing, Sharepod, TouchCopy) to view and copy music, videos, and photos back to a computer. It also suggests copying memory cards via SD adapters, backing up rescued files to cloud or external drives, and options to recycle, repair, or pass the devices along after data is secured.

via The New York Times|
#data-recovery#file-transfer#ipod
"5 Common Malware Mistakes When Charging and Traveling"
technology2 years ago

"5 Common Malware Mistakes When Charging and Traveling"

The FBI warns against using public USB charging kiosks due to the risk of malware attacks, known as juice jacking, where hackers can upload malware to devices. To stay safe, it's recommended to use power outlets instead of USB ports, opt for wireless charging pads, avoid sharing data when connecting to unknown devices, carry an external battery, and be cautious when using USB connections, especially when traveling overseas.

via Fox News|
#charging#cybersecurity#malware
The USB Cart of Death: Microsoft's Devastating BSOD Scourge
technology2 years ago

The USB Cart of Death: Microsoft's Devastating BSOD Scourge

Microsoft veteran Raymond Chen recalls the USB Cart of Death, a wheeled cart loaded with every USB device available, used to test USB support during the development of Windows. The cart, connected through multiple USB hubs, would be wheeled into the office of a kernel developer, who would plug in a single cable and experience a blue screen of death when the cable was abruptly yanked. Despite the chaos it caused, the USB Cart of Death helped improve USB support in Windows.

via The Register|
#development#microsoft#technology
"Google Pixel 8 Series: Enhanced Audio and AI Features Unveiled"
technology2 years ago

"Google Pixel 8 Series: Enhanced Audio and AI Features Unveiled"

Google's VP of Engineering, Dave Burke, confirmed that the Pixel 8 series will receive support for lossless USB audio in a future release. This feature will ensure "bit perfect audio" by bypassing the audio mixer and processing effects. Android 14 already added support for lossless audio formats over USB wired headsets. Users will no longer need a DAC to enjoy high-quality music on their Pixel 8 devices. App developers will need to adopt the new API for lossless audio to take full advantage of this feature.

via Android Central|
#android-14#google#lossless-audio
technology2 years ago

"Linux's Latest Attempt to Disable RNDIS Protocol Drivers"

Linux is making another attempt to disable all Microsoft Remote Network Driver Interface Specification (RNDIS) drivers in the kernel due to security concerns. The latest patch in the rndis-removal branch makes the drivers depend on "BROKEN," indicating that they are insecure and won't build. If there are no serious objections, the drivers may be removed from the kernel tree in future updates. The Microsoft RNDIS protocol is considered insecure and vulnerable, and disabling the drivers aims to prevent their use on systems with untrusted hosts or devices.

via Phoronix|
#kernel#linux#rndis-drivers
Celebrating 25 Years of iMac Innovation and Anticipating the Next Launch.
technology3 years ago

Celebrating 25 Years of iMac Innovation and Anticipating the Next Launch.

The original iMac, released 25 years ago, was a game-changer for Apple and the computer industry. It was colorful, playful, and eschewed legacy connectors in favor of the then-new USB protocol. Though the iMac has evolved over the years, it remains Apple's standard-bearer for all-in-one desktops. The latest M1 iMac has returned to its roots with a colorful design and a starting price point of $1299, the same as its progenitor. While desktops may be less common than they once were, the iMac is a survivor and will likely stick around for years to come.

via Macworld|
#apple#computer-industry#imac