How to Avoid Juice Jacking

Our smartphones have become indispensable tools for our daily lives – so seeing that dreaded red battery indicator can induce some serious anxiety. But before you jack your phone into some public USB charging port, think twice. Those USB connections can pass data as well as power, and it’s actually possible to hack your phone using those ubiquitous and innocent-looking ports. Is this common? Probably not. But it’s also very easy to avoid. I’ll give you several tips for staying safe, particularly while traveling.

In other news: Mullvad VPN was subjected to a search warrant (but had no data to give up); Proton has announced that it has created a password manager; YubiCo is merging with another company and going public; Facebook probably owes you some money; Apple HomePods can tell you if your house is on fire; one of several Israeli spyware makers is shutting down; the US and several partner countries are urging device makers to adopt Security by Design principles; hackers use fake Chrome updates to install malware; the much-hyped Florida water treatment plant hack wasn’t really a hack; clever thieves are stealing modern cars through headlamp connectors; and health care portal check-in vendors are tricking patients into allowing them to monetize very sensitive health data.

Article Links

  1. [] Mullvad VPN was subject to a search warrant. Customer data not compromised
  2. [] Proton Pass is now in beta
  3. [] Yubico is merging with ACQ Bure: merged company intends to go public on Nasdaq First North Growth Market in Stockholm
  4. [Lifehacker] Facebook Probably Owes You Money
  5. [MacRumors] HomePod Can Now Alert You If Your Smoke Alarm Goes Off
  6. [The Hacker News] Israeli Spyware Vendor QuaDream to Shut Down Following Citizen Lab and Microsoft Expose
  7. [] U.S. and International Partners Publish Secure-by-Design and -Default Principles and Approaches
  8. [Tom’s Guide] Hackers are using fake Chrome updates to spread malware — don’t fall for this
  9.  [VICE] Much-Hyped Water Plant Hack Wasn’t a Hack, Was Actually User Error, Official Says
  10. [] CAN do attitude: How thieves steal cars using network bus
  11. [] I declined to share my medical data with advertisers at my doctor’s office. One company claimed otherwise
  12. Tip of the Week: How to Avoid Juice Jacking

Further Info

Table of Contents

Use these timestamps to jump to a particular section of the show.

  • 0:01:02: News preview
  • 0:03:03: Mullvad VPN search warrant reveals zero customer data
  • 0:04:57: Proton launching a new password manager
  • 0:06:46: YubiCo merging with ACQ Bure
  • 0:07:41: Facebook may owe you some money
  • 0:12:10: Apple HomePod can now detect smoke alarm alerts
  • 0:15:16: Israeli Spyware Vendor QuaDream to Shut Down
  • 0:20:38: U.S. (et al) Publish Secure-by-Design Principles
  • 0:24:33: Hackers use fake Chrome updates to spread malware
  • 0:31:13: Much-Hyped Water Plant “Hack” Was Actually User Error
  • 0:36:45: Clever thieves steal cars by hacking CAN bus
  • 0:45:24: Unwanted sharing of medical data with advertisers
  • 0:57:48: Tip of the Week: Juice Jacking
  • 1:03:39: Preview of upcoming stuff