Rocksolid Light

News from da outaworlds

mail  files  register  groups  login

Message-ID:  

Q: What do little WASPs want to be when they grow up? A: The very best person they can possibly be.


comp / comp.misc / Re: Malicious USB Interfaces In Airports

SubjectAuthor
* Malicious USB Interfaces In AirportsLawrence D'Oliveiro
+- Re: Malicious USB Interfaces In Airportsyeti
+* Re: Malicious USB Interfaces In AirportsAndy Burns
|`* Re: Malicious USB Interfaces In AirportsScott Alfter
| `* Re: Malicious USB Interfaces In AirportsRalph Fox
|  +* Re: Malicious USB Interfaces In AirportsAndy Burns
|  |+- Re: Malicious USB Interfaces In AirportsBob Eager
|  |`* Re: Malicious USB Interfaces In AirportsRalph Fox
|  | +* Re: Malicious USB Interfaces In AirportsAndy Burns
|  | |`* Re: Malicious USB Interfaces In AirportsRalph Fox
|  | | `* Re: Malicious USB Interfaces In AirportsDave Yeo
|  | |  `* Re: Malicious USB Interfaces In AirportsRalph Fox
|  | |   +* Re: Malicious USB Interfaces In AirportsAndy Burns
|  | |   |`- Re: Malicious USB Interfaces In AirportsComputer Nerd Kev
|  | |   `- Re: Malicious USB Interfaces In AirportsEric Pozharski
|  | `* Re: Malicious USB Interfaces In AirportsSpiros Bousbouras
|  |  `- Re: Malicious USB Interfaces In AirportsRalph Fox
|  `* Re: Malicious USB Interfaces In AirportsScott Alfter
|   `* Re: Malicious USB Interfaces In AirportsRalph Fox
|    `* Re: Malicious USB Interfaces In AirportsAndy Burns
|     `- Re: Malicious USB Interfaces In AirportsRalph Fox
`* Re: Malicious USB Interfaces In AirportsSylvia Else
 `- Re: Malicious USB Interfaces In AirportsAndy Burns

1
Subject: Malicious USB Interfaces In Airports
From: Lawrence D'Oliv
Newsgroups: comp.misc, nz.comp
Organization: A noiseless patient Spider
Date: Fri, 7 Jun 2024 04:02 UTC
Path: eternal-september.org!news.eternal-september.org!.POSTED!not-for-mail
From: ldo@nz.invalid (Lawrence D'Oliveiro)
Newsgroups: comp.misc,nz.comp
Subject: Malicious USB Interfaces In Airports
Date: Fri, 7 Jun 2024 04:02:13 -0000 (UTC)
Organization: A noiseless patient Spider
Lines: 15
Message-ID: <v3u0o5$1tsmd$1@dont-email.me>
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
Injection-Date: Fri, 07 Jun 2024 06:02:13 +0200 (CEST)
Injection-Info: dont-email.me; posting-host="21a6995757d724b8d83dd14f044d030a";
logging-data="2028237"; mail-complaints-to="abuse@eternal-september.org"; posting-account="U2FsdGVkX19s/99TyE03oNYqY0/k6jHz"
User-Agent: Pan/0.158 (Avdiivka; )
Cancel-Lock: sha1:GWO/QaVpd6ya5OXD4VGeLaVSw0I=
View all headers

Seems there have been cases of crims hijacking USB charging outlets in
airports to connect special devices that can pwn your mobile device
<https://www.nzherald.co.nz/travel/news/airport-passengers-warned-of-phone-charging-scams/RGBS35ORBVBUDJIVO466TIFNAQ/>.

When I was in Hong Kong Airport a few years ago, it was very hard for
me to find a mains outlet to charge my laptop. Just about all the
ports built into the public seating areas were USB ones, for
phones/tablets.

It is possible to get USB cables that only connect the power wires for
charging, without enabling data transfer. Alternatively, here
<https://github.com/robertfisk/USG/wiki> is a USB “firewall”-type
device that tries to protect you from malicious devices. If you don’t
want to build your own, there’s a link in the readme to buy NZ-made
ones.

Subject: Re: Malicious USB Interfaces In Airports
From: yeti
Newsgroups: comp.misc, nz.comp
Followup: comp.misc,nz.comp
Organization: Democratic Order of Pirates International (DOPI)
Date: Fri, 7 Jun 2024 05:21 UTC
References: 1
Path: eternal-september.org!news.eternal-september.org!.POSTED!not-for-mail
From: yeti@tilde.institute (yeti)
Newsgroups: comp.misc,nz.comp
Subject: Re: Malicious USB Interfaces In Airports
Followup-To: comp.misc,nz.comp
Date: Fri, 07 Jun 2024 06:03:10 +0042
Organization: Democratic Order of Pirates International (DOPI)
Lines: 6
Message-ID: <87msnxe3ax.fsf@tilde.institute>
References: <v3u0o5$1tsmd$1@dont-email.me>
MIME-Version: 1.0
Content-Type: text/plain
Injection-Date: Fri, 07 Jun 2024 07:21:15 +0200 (CEST)
Injection-Info: dont-email.me; posting-host="60b1e83e42e441d4deaf3d676c24d99f";
logging-data="2043925"; mail-complaints-to="abuse@eternal-september.org"; posting-account="U2FsdGVkX18wM5kwMKQU2rJlNXSLmxRu"
User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/27.1 (gnu/linux)
Cancel-Lock: sha1:AQcLuEHLN+rPvpgIrauBzaU8zdk=
sha1:Ohht9saR5B1QZyfqzM6iM8BOFZU=
X-Face: "-Nh[_Q`f/iywEEk*gL\V>5N1AB*"sDJ8;EUV=C-0Y@WB9ePs{Cw>dh=u?}LO}?T(5_L2HX
`mj:w>@KY3N6`v6Y!/<)"&OTwwj<}i=2g^/|Mp#95.z4HsbUizxbZ*4X085{X||BvThEN9wD=Q1o7"
5d3u_b|SUTt
Face: iVBORw0KGgoAAAANSUhEUgAAADAAAAAwAQMAAABtzGvEAAAABlBMVEUAAAD///+l2Z/dAAAAiklEQVQY02NgoCUQOASmOJwPAElGjuQfIIrH8A9IsK3wJ0jFMcPHDUAVxywPNzCw8Dy3bD7AwMzy+Q/7AQbGvuq57QsYGI+brz+fwMDw+9re/x8YGLPcFP8/YGBccaTg4QcG5o4WBeYGBnaBngTDBJBFDvUHQBY5/G8AWXHgH9j65h9gitmBgfYAAJOqKugnjqEOAAAAAElFTkSuQmCC
View all headers

Maybe better only charge powerbanks on untrusted outlets and then later
charge your phone with them. That adds the benefit that power glitches
may only kill the powerbank and not the phone.

--
I do not bite, I just want to play.

Subject: Re: Malicious USB Interfaces In Airports
From: Andy Burns
Newsgroups: comp.misc, nz.comp
Date: Fri, 7 Jun 2024 08:07 UTC
References: 1
Path: eternal-september.org!news.eternal-september.org!feeder3.eternal-september.org!fu-berlin.de!uni-berlin.de!individual.net!not-for-mail
From: usenet@andyburns.uk (Andy Burns)
Newsgroups: comp.misc,nz.comp
Subject: Re: Malicious USB Interfaces In Airports
Date: Fri, 7 Jun 2024 09:07:12 +0100
Lines: 8
Message-ID: <lcftdfFlf5sU1@mid.individual.net>
References: <v3u0o5$1tsmd$1@dont-email.me>
Mime-Version: 1.0
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: base64
X-Trace: individual.net P7BDacEL2SIxx7gwbVJPTggXfgtUpDv/VQUPxiztd3G+0TvW8z
Cancel-Lock: sha1:P3mSYd67/vbL7qUkT6RjBkUzeto= sha256:eTYGr1J4Ia/Q4reAjorjvcu9JlKcvhDAIB1QE3YhHHQ=
User-Agent: Mozilla Thunderbird
Content-Language: en-GB
In-Reply-To: <v3u0o5$1tsmd$1@dont-email.me>
View all headers

Lawrence D'Oliveiro wrote:
> It is possible to get USB cables that only connect the power wires for
> charging, without enabling data transfer. Alternatively, here
> <https://github.com/robertfisk/USG/wiki> is a USB “firewall”-type
> device that tries to protect you from malicious devices.
See also "USB condom"
<https://www.usbcompany.co.uk/accessories/usb-condom>
Not so simple with type-C and PD

Subject: Re: Malicious USB Interfaces In Airports
From: Scott Alfter
Newsgroups: comp.misc, nz.comp
Organization: USS Voyager NCC-74656, Delta Quadrant
Date: Fri, 7 Jun 2024 14:12 UTC
References: 1 2
Path: eternal-september.org!news.eternal-september.org!feeder3.eternal-september.org!news.mixmin.net!news.neodome.net!npeer.as286.net!npeer-ng0.as286.net!peer02.ams1!peer.ams1.xlned.com!news.xlned.com!peer03.iad!feed-me.highwinds-media.com!news.highwinds-media.com!fx17.iad.POSTED!not-for-mail
Newsgroups: comp.misc,nz.comp
Subject: Re: Malicious USB Interfaces In Airports
References: <v3u0o5$1tsmd$1@dont-email.me> <lcftdfFlf5sU1@mid.individual.net>
Organization: USS Voyager NCC-74656, Delta Quadrant
X-Newsreader: trn 4.0-test77 (Sep 1, 2010)
From: scott@alfter.diespammersdie.us (Scott Alfter)
Originator: scott@alfter.diespammersdie.us (Scott Alfter)
Lines: 32
Message-ID: <bzE8O.16$vNb3.1@fx17.iad>
X-Complaints-To: https://www.astraweb.com/aup
NNTP-Posting-Date: Fri, 07 Jun 2024 14:12:23 UTC
Date: Fri, 07 Jun 2024 14:12:23 GMT
X-Received-Bytes: 1886
View all headers

In article <lcftdfFlf5sU1@mid.individual.net>,
Andy Burns <usenet@andyburns.uk> wrote:
>Lawrence D'Oliveiro wrote:
>
>> It is possible to get USB cables that only connect the power wires for
>> charging, without enabling data transfer. Alternatively, here
>> <https://github.com/robertfisk/USG/wiki> is a USB "firewall"-type
>> device that tries to protect you from malicious devices.
>
>See also "USB condom"
><https://www.usbcompany.co.uk/accessories/usb-condom>
>
>Not so simple with type-C and PD

This one's worked reasonably well for me:

https://amzn.to/3xaZQ2r

I suspect it blocks PD negotiation for higher power levels, but if all
you're charging is a phone, it should fall back to at least 5V 2.4-3A charging
of some sort. (My current phone doesn't support PD anyway...it uses
something called "Warp Charge" that is unlikely to be supported by any
public charger.)

(Your newsreader is inserting CRs at the ends of lines, BTW...might want to
fix that.)

--
_/_
/ v \ Scott Alfter (remove the obvious to send mail)
(IIGS( https://alfter.us/ Top-posting!
\_^_/ >What's the most annoying thing on Usenet?

Subject: Re: Malicious USB Interfaces In Airports
From: Ralph Fox
Newsgroups: comp.misc
Organization: Forte - www.forteinc.com
Date: Fri, 7 Jun 2024 20:29 UTC
References: 1 2 3
Path: eternal-september.org!news.eternal-september.org!feeder3.eternal-september.org!nntp.comgw.net!peer03.ams4!peer.am4.highwinds-media.com!peer03.iad!feed-me.highwinds-media.com!news.highwinds-media.com!fx11.iad.POSTED!not-for-mail
From: -rf-nz-@-.invalid (Ralph Fox)
Newsgroups: comp.misc
Subject: Re: Malicious USB Interfaces In Airports
Message-ID: <5br66jp0u5gdvppc8nm9j2rmug0piq02uc@4ax.com>
References: <v3u0o5$1tsmd$1@dont-email.me> <lcftdfFlf5sU1@mid.individual.net> <bzE8O.16$vNb3.1@fx17.iad>
User-Agent: ForteAgent/8.00.32.1272
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
X-Face: 5gSW~"1=jGDo(BXfTrgL2BnC3tUB_\d0u@mP~wA1fvK`z8I[>1jXVVZ!N6ittQ.K<5!i3l> ==jcyAk.[B>kLg8TY{+8%edZ(le:ncPt%s8Pr?]QXNXO]0RC#V_zt|%>=bt>rZ2iCI^-yl7Be(]Ep> OfyI!3Bf|e
Lines: 18
X-Complaints-To: abuse@easynews.com
Organization: Forte - www.forteinc.com
X-Complaints-Info: Please be sure to forward a copy of ALL headers otherwise we will be unable to process your complaint properly.
Date: Sat, 08 Jun 2024 08:29:16 +1200
X-Received-Bytes: 1446
View all headers

On Fri, 07 Jun 2024 14:12:23 GMT, Scott Alfter wrote:

> (Your newsreader is inserting CRs at the ends of lines, BTW...might want to
> fix that.)

I see CRLF at the ends of lines in Andy Burns' message. Both in the
raw message and in the base64-decoded text. I checked Andy's message
on two different news servers.

CRLF is the correct, standard on-the-wire format.

--
Kind regards
Ralph Fox
🦊

A man must plow with such oxen as he hath.

Subject: Re: Malicious USB Interfaces In Airports
From: Andy Burns
Newsgroups: comp.misc
Date: Fri, 7 Jun 2024 20:57 UTC
References: 1 2 3 4
Path: eternal-september.org!news.eternal-september.org!feeder3.eternal-september.org!fu-berlin.de!uni-berlin.de!individual.net!not-for-mail
From: usenet@andyburns.uk (Andy Burns)
Newsgroups: comp.misc
Subject: Re: Malicious USB Interfaces In Airports
Date: Fri, 7 Jun 2024 21:57:40 +0100
Lines: 22
Message-ID: <lchai5Fs780U1@mid.individual.net>
References: <v3u0o5$1tsmd$1@dont-email.me> <lcftdfFlf5sU1@mid.individual.net>
<bzE8O.16$vNb3.1@fx17.iad> <5br66jp0u5gdvppc8nm9j2rmug0piq02uc@4ax.com>
Mime-Version: 1.0
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit
X-Trace: individual.net 2sweEvcA3wrF6Xr0v4l2ww9DLN50D3HG0PmK46ngheGZd7ql3r
Cancel-Lock: sha1:RVBaW+YQiNEPaUjbkNA8t4gkx8Q= sha256:RA6L8fh5okwlrFeo0x/w0QCZ4uDK3FQAEDpQe775p5I=
User-Agent: Mozilla Thunderbird
Content-Language: en-GB
In-Reply-To: <5br66jp0u5gdvppc8nm9j2rmug0piq02uc@4ax.com>
View all headers

Ralph Fox wrote:

> Scott Alfter wrote:
>
>> (Your newsreader is inserting CRs at the ends of lines, BTW...might want to
>> fix that.)
>
> I see CRLF at the ends of lines in Andy Burns' message. Both in the
> raw message and in the base64-decoded text. I checked Andy's message
> on two different news servers.
>
> CRLF is the correct, standard on-the-wire format.

Actually I think bare LF's are correct, no?

Thunderbird does on occasion do the wrong thing, if it sees 8-bit
characters (often an &nbsp; whitespace character, or two spaces at the
end of a paragraph) it decides to base-64 encode where it doesn't need
to, I think on this occasion it took objection to Lawrence's fancy
double quotes around the word 'firewall', unfortunately I've tried
various character encodings/charsets and nothing prevents the issue.

Subject: Re: Malicious USB Interfaces In Airports
From: Bob Eager
Newsgroups: comp.misc
Date: Fri, 7 Jun 2024 21:22 UTC
References: 1 2 3 4 5
Path: eternal-september.org!news.eternal-september.org!feeder3.eternal-september.org!fu-berlin.de!uni-berlin.de!individual.net!not-for-mail
From: news0009@eager.cx (Bob Eager)
Newsgroups: comp.misc
Subject: Re: Malicious USB Interfaces In Airports
Date: 7 Jun 2024 21:22:33 GMT
Lines: 20
Message-ID: <lchc0pF3icgU3@mid.individual.net>
References: <v3u0o5$1tsmd$1@dont-email.me> <lcftdfFlf5sU1@mid.individual.net>
<bzE8O.16$vNb3.1@fx17.iad> <5br66jp0u5gdvppc8nm9j2rmug0piq02uc@4ax.com>
<lchai5Fs780U1@mid.individual.net>
Mime-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
X-Trace: individual.net ZcpNCmoxghsyA2gL3r+Klw0KzUyvcOThHJwjocqU1hElBX3boQ
Cancel-Lock: sha1:wAYu8gJgH8SqfOqkMBv/bChdQMs= sha256:J4tyLLcgl4FgI/irPQ7a5aDBjjLU6IP1VqzDLPvAcV0=
User-Agent: Pan/0.145 (Duplicitous mercenary valetism; d7e168a
git.gnome.org/pan2)
View all headers

On Fri, 07 Jun 2024 21:57:40 +0100, Andy Burns wrote:

> Ralph Fox wrote:
>> CRLF is the correct, standard on-the-wire format.
>
> Actually I think bare LF's are correct, no?

I think the RFC specifies CRLF. What the client shows is another matter.

> I think on this occasion it took objection to Lawrence's fancy
> double quotes around the word 'firewall', unfortunately I've tried
> various character encodings/charsets and nothing prevents the issue.

I don't have the issue as I killfiled him way back!

--
Using UNIX since v6 (1975)...

Use the BIG mirror service in the UK:
http://www.mirrorservice.org

Subject: Re: Malicious USB Interfaces In Airports
From: Scott Alfter
Newsgroups: comp.misc
Organization: USS Voyager NCC-74656, Delta Quadrant
Date: Fri, 7 Jun 2024 21:41 UTC
References: 1 2 3 4
Path: eternal-september.org!news.eternal-september.org!feeder3.eternal-september.org!usenet.blueworldhosting.com!diablo1.usenet.blueworldhosting.com!peer01.iad!feed-me.highwinds-media.com!news.highwinds-media.com!fx18.iad.POSTED!not-for-mail
Newsgroups: comp.misc
Subject: Re: Malicious USB Interfaces In Airports
References: <v3u0o5$1tsmd$1@dont-email.me> <lcftdfFlf5sU1@mid.individual.net> <bzE8O.16$vNb3.1@fx17.iad> <5br66jp0u5gdvppc8nm9j2rmug0piq02uc@4ax.com>
Organization: USS Voyager NCC-74656, Delta Quadrant
X-Newsreader: trn 4.0-test77 (Sep 1, 2010)
From: scott@alfter.diespammersdie.us (Scott Alfter)
Originator: scott@alfter.diespammersdie.us (Scott Alfter)
Lines: 23
Message-ID: <i8L8O.3646$cLn1.143@fx18.iad>
X-Complaints-To: https://www.astraweb.com/aup
NNTP-Posting-Date: Fri, 07 Jun 2024 21:41:34 UTC
Date: Fri, 07 Jun 2024 21:41:34 GMT
X-Received-Bytes: 1623
View all headers

In article <5br66jp0u5gdvppc8nm9j2rmug0piq02uc@4ax.com>,
Ralph Fox <-rf-nz-@-.invalid> wrote:
>On Fri, 07 Jun 2024 14:12:23 GMT, Scott Alfter wrote:
>
>> (Your newsreader is inserting CRs at the ends of lines, BTW...might want to
>> fix that.)
>
>I see CRLF at the ends of lines in Andy Burns' message. Both in the
>raw message and in the base64-decoded text. I checked Andy's message
>on two different news servers.
>
>CRLF is the correct, standard on-the-wire format.

Maybe they were extras in addition to whatever standard newline is present.
When I replied to his post, there was an extra Ctrl-M at the end of every
line. Right now, while I'm replying to your post, it's normal...no extra
characters that need deleting.

--
_/_
/ v \ Scott Alfter (remove the obvious to send mail)
(IIGS( https://alfter.us/ Top-posting!
\_^_/ >What's the most annoying thing on Usenet?

Subject: Re: Malicious USB Interfaces In Airports
From: Ralph Fox
Newsgroups: comp.misc
Organization: Forte - www.forteinc.com
Date: Sat, 8 Jun 2024 04:15 UTC
References: 1 2 3 4 5
Path: eternal-september.org!news.eternal-september.org!feeder3.eternal-september.org!usenet.blueworldhosting.com!diablo1.usenet.blueworldhosting.com!peer03.iad!feed-me.highwinds-media.com!news.highwinds-media.com!fx45.iad.POSTED!not-for-mail
From: -rf-nz-@-.invalid (Ralph Fox)
Newsgroups: comp.misc
Subject: Re: Malicious USB Interfaces In Airports
Message-ID: <vlm76jt8oiphgh97jpvlkemmair3hl767v@4ax.com>
References: <v3u0o5$1tsmd$1@dont-email.me> <lcftdfFlf5sU1@mid.individual.net> <bzE8O.16$vNb3.1@fx17.iad> <5br66jp0u5gdvppc8nm9j2rmug0piq02uc@4ax.com> <lchai5Fs780U1@mid.individual.net>
User-Agent: ForteAgent/8.00.32.1272
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
X-Face: 5gSW~"1=jGDo(BXfTrgL2BnC3tUB_\d0u@mP~wA1fvK`z8I[>1jXVVZ!N6ittQ.K<5!i3l> ==jcyAk.[B>kLg8TY{+8%edZ(le:ncPt%s8Pr?]QXNXO]0RC#V_zt|%>=bt>rZ2iCI^-yl7Be(]Ep> OfyI!3Bf|e
Lines: 62
X-Complaints-To: abuse@easynews.com
Organization: Forte - www.forteinc.com
X-Complaints-Info: Please be sure to forward a copy of ALL headers otherwise we will be unable to process your complaint properly.
Date: Sat, 08 Jun 2024 16:15:04 +1200
X-Received-Bytes: 3337
View all headers

On Fri, 7 Jun 2024 21:57:40 +0100, Andy Burns wrote:
> Ralph Fox wrote:
>> Scott Alfter wrote:
>>
>>> (Your newsreader is inserting CRs at the ends of lines, BTW...might want to
>>> fix that.)
>>
>> I see CRLF at the ends of lines in Andy Burns' message. Both in the
>> raw message and in the base64-decoded text. I checked Andy's message
>> on two different news servers.
>>
>> CRLF is the correct, standard on-the-wire format.
>
> Actually I think bare LF's are correct, no?

The on-the-wire format for transmission is CRLF, *not* bare LF. See,
for example, RFC5537 "Netnews Architecture and Protocols" section 2
"Transport".

<https://www.rfc-editor.org/rfc/rfc5537#section-2>

| Transports for Netnews articles MUST treat news articles as
| uninterpreted sequences of octets, excluding the values %d00 (which
| may not occur in Netnews articles), %d13, and %d10 (which MUST only
| appear in Netnews articles as a pair in that order and which,
| together, denote a line separator). These octets are the US-ASCII
| [ASCII] characters NUL, CR, and LF respectively.

How a newsreader client or news server stores articles locally (CRLF
or bare LF) is up to that client or server. But when communicating
between client and server / server and client, the on-the-wire format
is CRLF.

> Thunderbird does on occasion do the wrong thing, if it sees 8-bit
> characters (often an &nbsp; whitespace character, or two spaces at the
> end of a paragraph) it decides to base-64 encode where it doesn't need
> to, I think on this occasion it took objection to Lawrence's fancy
> double quotes around the word 'firewall', unfortunately I've tried
> various character encodings/charsets and nothing prevents the issue.

Using the latest Thunderbird 115.11.1 on Windows...

* When I compose a reply to Lawrence's post with the 'curly' quotes
and put it in the Outbox, my reply is not base-64 encoded.
* I would like to try composing my reply with various character
encodings/charsets, but current Thunderbird 115.11.1 does not seem
to have that option any more. In Thunderbird, my composed reply
to Lawrence is always UTF-8.

Using Thunderbird 115.11.0 on Linux Mint...

Same thing.

--
Kind regards
Ralph Fox
🦊

Great spenders are bad lenders.

Subject: Re: Malicious USB Interfaces In Airports
From: Andy Burns
Newsgroups: comp.misc
Date: Sat, 8 Jun 2024 11:00 UTC
References: 1 2 3 4 5 6
Path: eternal-september.org!news.eternal-september.org!feeder3.eternal-september.org!fu-berlin.de!uni-berlin.de!individual.net!not-for-mail
From: usenet@andyburns.uk (Andy Burns)
Newsgroups: comp.misc
Subject: Re: Malicious USB Interfaces In Airports
Date: Sat, 8 Jun 2024 12:00:10 +0100
Lines: 31
Message-ID: <lcirtqF4hojU1@mid.individual.net>
References: <v3u0o5$1tsmd$1@dont-email.me> <lcftdfFlf5sU1@mid.individual.net>
<bzE8O.16$vNb3.1@fx17.iad> <5br66jp0u5gdvppc8nm9j2rmug0piq02uc@4ax.com>
<lchai5Fs780U1@mid.individual.net>
<vlm76jt8oiphgh97jpvlkemmair3hl767v@4ax.com>
Mime-Version: 1.0
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit
X-Trace: individual.net 6+SoEERYuxxgtZmnsHlBgQUJzVVLyiY5Fn1qb5KQgzdGX+Q4jq
Cancel-Lock: sha1:h7ZFoUhRLG5UCEssz7NLnt7aubI= sha256:leXYWXKQJyU0PLB//aUBqlYdnmCKnzk9szXNSe5hZw4=
User-Agent: Mozilla Thunderbird
Content-Language: en-GB
In-Reply-To: <vlm76jt8oiphgh97jpvlkemmair3hl767v@4ax.com>
View all headers

Ralph Fox wrote:

> Using the latest Thunderbird 115.11.1 on Windows...
>
> * When I compose a reply to Lawrence's post with the 'curly' quotes
> and put it in the Outbox, my reply is not base-64 encoded.

Several times I've half-arsedly looked into what causes my TB to use
base64, after looking in a hex editor, it always seems to occur after a
perfect storm combination of user-agents, content-types,
character-encodings etc

Maybe I have some ancient about:config setting that I can't remember?

I've never managed to get even close to being able to log a good
bugzilla ticket.

> * I would like to try composing my reply with various character
> encodings/charsets, but current Thunderbird 115.11.1 does not seem
> to have that option any more.

Tools/Accounts/[ServerName]/ServerSettings/DefaultTextEncoding

In Thunderbird, my composed reply
> to Lawrence is always UTF-8.
>
> Using Thunderbird 115.11.0 on Linux Mint...
>
> Same thing.

Subject: Re: Malicious USB Interfaces In Airports
From: Spiros Bousbouras
Newsgroups: comp.misc
Organization: A noiseless patient Spider
Date: Sat, 8 Jun 2024 21:36 UTC
References: 1 2 3 4 5 6
Path: eternal-september.org!news.eternal-september.org!.POSTED!not-for-mail
From: spibou@gmail.com (Spiros Bousbouras)
Newsgroups: comp.misc
Subject: Re: Malicious USB Interfaces In Airports
Date: Sat, 8 Jun 2024 21:36:22 -0000 (UTC)
Organization: A noiseless patient Spider
Lines: 41
Message-ID: <VdrkW+=1AKum285Zx@bongo-ra.co>
References: <v3u0o5$1tsmd$1@dont-email.me> <lcftdfFlf5sU1@mid.individual.net> <bzE8O.16$vNb3.1@fx17.iad>
<5br66jp0u5gdvppc8nm9j2rmug0piq02uc@4ax.com> <lchai5Fs780U1@mid.individual.net> <vlm76jt8oiphgh97jpvlkemmair3hl767v@4ax.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
Injection-Date: Sat, 08 Jun 2024 23:36:22 +0200 (CEST)
Injection-Info: dont-email.me; posting-host="c1e4e778f87d2f567d4f7b949c5196e9";
logging-data="2999518"; mail-complaints-to="abuse@eternal-september.org"; posting-account="U2FsdGVkX19l04ZnO6kUVzRmMFKRmd0O"
Cancel-Lock: sha1:Jipg5xZo0EkVTMIKXA1B49F6jp0=
X-Organisation: Weyland-Yutani
In-Reply-To: <vlm76jt8oiphgh97jpvlkemmair3hl767v@4ax.com>
X-Server-Commands: nowebcancel
View all headers

On Sat, 08 Jun 2024 16:15:04 +1200
Ralph Fox <-rf-nz-@-.invalid> wrote:
> On Fri, 7 Jun 2024 21:57:40 +0100, Andy Burns wrote:
> > Ralph Fox wrote:
> >> Scott Alfter wrote:
> >>
> >>> (Your newsreader is inserting CRs at the ends of lines, BTW...might want to
> >>> fix that.)
> >>
> >> I see CRLF at the ends of lines in Andy Burns' message. Both in the
> >> raw message and in the base64-decoded text. I checked Andy's message
> >> on two different news servers.
> >>
> >> CRLF is the correct, standard on-the-wire format.
> >
> > Actually I think bare LF's are correct, no?
>
> The on-the-wire format for transmission is CRLF, *not* bare LF. See,
> for example, RFC5537 "Netnews Architecture and Protocols" section 2
> "Transport".
>
> <https://www.rfc-editor.org/rfc/rfc5537#section-2>
>
> | Transports for Netnews articles MUST treat news articles as
> | uninterpreted sequences of octets, excluding the values %d00 (which
> | may not occur in Netnews articles), %d13, and %d10 (which MUST only
> | appear in Netnews articles as a pair in that order and which,
> | together, denote a line separator). These octets are the US-ASCII
> | [ASCII] characters NUL, CR, and LF respectively.
>
>
> How a newsreader client or news server stores articles locally (CRLF
> or bare LF) is up to that client or server. But when communicating
> between client and server / server and client, the on-the-wire format
> is CRLF.

I believe the RFC quote refers to articles before decoding (if there was an
encoding step). Here the complaint is that Andy's message had CR at the end
of every line even after decoding. I don't believe there is any standard for
that and a newsreader should probably follow the customs of the underlying
operating system.

Subject: Re: Malicious USB Interfaces In Airports
From: Sylvia Else
Newsgroups: comp.misc
Date: Sun, 9 Jun 2024 08:55 UTC
References: 1
Path: eternal-september.org!news.eternal-september.org!feeder3.eternal-september.org!fu-berlin.de!uni-berlin.de!individual.net!not-for-mail
From: sylvia@email.invalid (Sylvia Else)
Newsgroups: comp.misc
Subject: Re: Malicious USB Interfaces In Airports
Date: Sun, 9 Jun 2024 16:55:21 +0800
Lines: 23
Message-ID: <lcl8vpFfns4U1@mid.individual.net>
References: <v3u0o5$1tsmd$1@dont-email.me>
Mime-Version: 1.0
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 8bit
X-Trace: individual.net hW2Ud4dHWWBNejxZ2Pl2SQT/84hyoqOUh5riDK8/+k/ZUxVwgI
Cancel-Lock: sha1:b8/t+V4AcbuhSxYbcm25Obxg8MY= sha256:A5r/mjjfLrbV2/6o5s3lwTxj5hb4T6LNXPjfgbEDqN0=
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:102.0) Gecko/20100101
Thunderbird/102.15.1
Content-Language: en-US
In-Reply-To: <v3u0o5$1tsmd$1@dont-email.me>
View all headers

On 07-June-24 12:02 pm, Lawrence D'Oliveiro wrote:
> Seems there have been cases of crims hijacking USB charging outlets in
> airports to connect special devices that can pwn your mobile device
> <https://www.nzherald.co.nz/travel/news/airport-passengers-warned-of-phone-charging-scams/RGBS35ORBVBUDJIVO466TIFNAQ/>.
>
> When I was in Hong Kong Airport a few years ago, it was very hard for
> me to find a mains outlet to charge my laptop. Just about all the
> ports built into the public seating areas were USB ones, for
> phones/tablets.
>
> It is possible to get USB cables that only connect the power wires for
> charging, without enabling data transfer. Alternatively, here
> <https://github.com/robertfisk/USG/wiki> is a USB “firewall”-type
> device that tries to protect you from malicious devices. If you don’t
> want to build your own, there’s a link in the readme to buy NZ-made
> ones.

Third attempt - I'm not seeing this arrive in the NG.

Is this still an issue, at least as far as Android phones are concerned?

Sylvia.

Subject: Re: Malicious USB Interfaces In Airports
From: Andy Burns
Newsgroups: comp.misc
Date: Sun, 9 Jun 2024 09:05 UTC
References: 1 2
Path: eternal-september.org!news.eternal-september.org!feeder3.eternal-september.org!fu-berlin.de!uni-berlin.de!individual.net!not-for-mail
From: usenet@andyburns.uk (Andy Burns)
Newsgroups: comp.misc
Subject: Re: Malicious USB Interfaces In Airports
Date: Sun, 9 Jun 2024 10:05:43 +0100
Lines: 14
Message-ID: <lcl9j7Fff8sU1@mid.individual.net>
References: <v3u0o5$1tsmd$1@dont-email.me> <lcl8vpFfns4U1@mid.individual.net>
Mime-Version: 1.0
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit
X-Trace: individual.net ixKzRgsLwCzZLmQr60vSLg/2l6hkhMnxTUgs6ckTdZJd1vEzts
Cancel-Lock: sha1:3NdwHW1fW1a6seNTpzFR8XxB86c= sha256:FmCPqWmGbMmEoOVmi+YWf87LrJlGBc0aGHxdPTKjoQc=
User-Agent: Mozilla Thunderbird
Content-Language: en-GB
In-Reply-To: <lcl8vpFfns4U1@mid.individual.net>
View all headers

Sylvia Else wrote:

> Lawrence D'Oliveiro wrote:
>
>> It is possible to get USB cables that only connect the power wires for
>> charging, without enabling data transfer.
>
> Is this still an issue, at least as far as Android phones are concerned?

Most(?) modern phones ask if you want to just charge, or enable
file/media transfer ... but who knows if there might be a way to
maliciously spoof an extra USB endpoint?

Subject: Re: Malicious USB Interfaces In Airports
From: Ralph Fox
Newsgroups: comp.misc
Organization: Forte - www.forteinc.com
Date: Sun, 9 Jun 2024 20:17 UTC
References: 1 2 3 4 5 6 7
Path: eternal-september.org!news.eternal-september.org!feeder3.eternal-september.org!news.szaf.org!news.enyo.de!news.uni-stuttgart.de!npeer.as286.net!npeer-ng0.as286.net!usenet.blueworldhosting.com!diablo1.usenet.blueworldhosting.com!peer01.iad!feed-me.highwinds-media.com!news.highwinds-media.com!fx45.iad.POSTED!not-for-mail
From: -rf-nz-@-.invalid (Ralph Fox)
Newsgroups: comp.misc
Subject: Re: Malicious USB Interfaces In Airports
Message-ID: <cf3c6j1ddrk76q7r54jlqvhs9ll2rqdtq7@4ax.com>
References: <v3u0o5$1tsmd$1@dont-email.me> <lcftdfFlf5sU1@mid.individual.net> <bzE8O.16$vNb3.1@fx17.iad> <5br66jp0u5gdvppc8nm9j2rmug0piq02uc@4ax.com> <lchai5Fs780U1@mid.individual.net> <vlm76jt8oiphgh97jpvlkemmair3hl767v@4ax.com> <VdrkW+=1AKum285Zx@bongo-ra.co>
User-Agent: ForteAgent/8.00.32.1272
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
X-Face: 5gSW~"1=jGDo(BXfTrgL2BnC3tUB_\d0u@mP~wA1fvK`z8I[>1jXVVZ!N6ittQ.K<5!i3l> ==jcyAk.[B>kLg8TY{+8%edZ(le:ncPt%s8Pr?]QXNXO]0RC#V_zt|%>=bt>rZ2iCI^-yl7Be(]Ep> OfyI!3Bf|e
Lines: 61
X-Complaints-To: abuse@easynews.com
Organization: Forte - www.forteinc.com
X-Complaints-Info: Please be sure to forward a copy of ALL headers otherwise we will be unable to process your complaint properly.
Date: Mon, 10 Jun 2024 08:17:54 +1200
X-Received-Bytes: 3401
View all headers

On Sat, 8 Jun 2024 21:36:22 -0000 (UTC), Spiros Bousbouras wrote:
> On Sat, 08 Jun 2024 16:15:04 +1200
> Ralph Fox <-rf-nz-@-.invalid> wrote:
>> On Fri, 7 Jun 2024 21:57:40 +0100, Andy Burns wrote:
>>> Ralph Fox wrote:
>>>> Scott Alfter wrote:
>>>>
>>>>> (Your newsreader is inserting CRs at the ends of lines, BTW...might want to
>>>>> fix that.)
>>>>
>>>> I see CRLF at the ends of lines in Andy Burns' message. Both in the
>>>> raw message and in the base64-decoded text. I checked Andy's message
>>>> on two different news servers.
>>>>
>>>> CRLF is the correct, standard on-the-wire format.
>>>
>>> Actually I think bare LF's are correct, no?
>>
>> The on-the-wire format for transmission is CRLF, *not* bare LF. See,
>> for example, RFC5537 "Netnews Architecture and Protocols" section 2
>> "Transport".
>>
>> <https://www.rfc-editor.org/rfc/rfc5537#section-2>
>>
>> | Transports for Netnews articles MUST treat news articles as
>> | uninterpreted sequences of octets, excluding the values %d00 (which
>> | may not occur in Netnews articles), %d13, and %d10 (which MUST only
>> | appear in Netnews articles as a pair in that order and which,
>> | together, denote a line separator). These octets are the US-ASCII
>> | [ASCII] characters NUL, CR, and LF respectively.
>>
>>
>> How a newsreader client or news server stores articles locally (CRLF
>> or bare LF) is up to that client or server. But when communicating
>> between client and server / server and client, the on-the-wire format
>> is CRLF.
>
> I believe the RFC quote refers to articles before decoding (if there was an
> encoding step).

Yes.

> Here the complaint is that Andy's message had CR at the end
> of every line even after decoding. I don't believe there is any standard for
> that and a newsreader should probably follow the customs of the underlying
> operating system.

Andy's message _after_ decoding_ also has CRLF at the end of every
line. As I stated in my reply to Scott Alfter earlier in this thread.

I tested this by running Andy's base-64 message body through a
base-64 decoder outside of my newsreader (to avoid any possibility
that my newsreader might modify the line ends after decoding).

--
Kind regards
Ralph Fox
🦊

Of idleness comes no goodness.

Subject: Re: Malicious USB Interfaces In Airports
From: Ralph Fox
Newsgroups: comp.misc
Organization: Forte - www.forteinc.com
Date: Sun, 9 Jun 2024 20:37 UTC
References: 1 2 3 4 5
Path: eternal-september.org!news.eternal-september.org!feeder3.eternal-september.org!nntp.comgw.net!peer03.ams4!peer.am4.highwinds-media.com!peer02.iad!feed-me.highwinds-media.com!news.highwinds-media.com!fx13.iad.POSTED!not-for-mail
From: -rf-nz-@-.invalid (Ralph Fox)
Newsgroups: comp.misc
Subject: Re: Malicious USB Interfaces In Airports
Message-ID: <4k4c6jp10hpmbm21hh0eoi01pnd0659s9c@4ax.com>
References: <v3u0o5$1tsmd$1@dont-email.me> <lcftdfFlf5sU1@mid.individual.net> <bzE8O.16$vNb3.1@fx17.iad> <5br66jp0u5gdvppc8nm9j2rmug0piq02uc@4ax.com> <i8L8O.3646$cLn1.143@fx18.iad>
User-Agent: ForteAgent/8.00.32.1272
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
X-Face: 5gSW~"1=jGDo(BXfTrgL2BnC3tUB_\d0u@mP~wA1fvK`z8I[>1jXVVZ!N6ittQ.K<5!i3l> ==jcyAk.[B>kLg8TY{+8%edZ(le:ncPt%s8Pr?]QXNXO]0RC#V_zt|%>=bt>rZ2iCI^-yl7Be(]Ep> OfyI!3Bf|e
Lines: 35
X-Complaints-To: abuse@easynews.com
Organization: Forte - www.forteinc.com
X-Complaints-Info: Please be sure to forward a copy of ALL headers otherwise we will be unable to process your complaint properly.
Date: Mon, 10 Jun 2024 08:37:30 +1200
X-Received-Bytes: 2349
View all headers

On Fri, 07 Jun 2024 21:41:34 GMT, Scott Alfter wrote:
> In article <5br66jp0u5gdvppc8nm9j2rmug0piq02uc@4ax.com>,
> Ralph Fox <-rf-nz-@-.invalid> wrote:
>> On Fri, 07 Jun 2024 14:12:23 GMT, Scott Alfter wrote:
>>
>>> (Your newsreader is inserting CRs at the ends of lines, BTW...might want to
>>> fix that.)
>>
>> I see CRLF at the ends of lines in Andy Burns' message. Both in the
>> raw message and in the base64-decoded text. I checked Andy's message
>> on two different news servers.
>>
>>CRLF is the correct, standard on-the-wire format.
>
> Maybe they were extras in addition to whatever standard newline is present.
> When I replied to his post, there was an extra Ctrl-M at the end of every
> line. Right now, while I'm replying to your post, it's normal...no extra
> characters that need deleting.

Andy's message body is base-64 encoded. Mine is not.

When I run Andy's raw base-64 message body through a base-64 decoder,
the message _after_ decoding also has CRLF and only CRLF at the ends
of lines. I tested this with a base-64 decoder outside of my newsreader,
to avoid any possibility that my newsreader might be modifying the line
ends after decoding.

--
Kind regards
Ralph Fox
🦊

He that would have honey, must have bees.

Subject: Re: Malicious USB Interfaces In Airports
From: Andy Burns
Newsgroups: comp.misc
Date: Sun, 9 Jun 2024 20:52 UTC
References: 1 2 3 4 5 6
Path: eternal-september.org!news.eternal-september.org!feeder3.eternal-september.org!fu-berlin.de!uni-berlin.de!individual.net!not-for-mail
From: usenet@andyburns.uk (Andy Burns)
Newsgroups: comp.misc
Subject: Re: Malicious USB Interfaces In Airports
Date: Sun, 9 Jun 2024 21:52:45 +0100
Lines: 13
Message-ID: <lcmj0vFkrvgU1@mid.individual.net>
References: <v3u0o5$1tsmd$1@dont-email.me> <lcftdfFlf5sU1@mid.individual.net>
<bzE8O.16$vNb3.1@fx17.iad> <5br66jp0u5gdvppc8nm9j2rmug0piq02uc@4ax.com>
<i8L8O.3646$cLn1.143@fx18.iad> <4k4c6jp10hpmbm21hh0eoi01pnd0659s9c@4ax.com>
Mime-Version: 1.0
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit
X-Trace: individual.net ajcwioKDlQCwWHNtFicmpAkfYbvAmZ/pnMYlEJoVdBZqhu4ggM
Cancel-Lock: sha1:jItYu7+fqZjXBpl+eYdiAGwoRug= sha256:GoQ1K/m66aVuAbnyQYiUzyex5iAqJJk+4r1sDhvblxs=
User-Agent: Mozilla Thunderbird
Content-Language: en-GB
In-Reply-To: <4k4c6jp10hpmbm21hh0eoi01pnd0659s9c@4ax.com>
View all headers

Ralph Fox wrote:

> Andy's message body is base-64 encoded. Mine is not.
>
> When I run Andy's raw base-64 message body through a base-64 decoder,
> the messageafter decoding also has CRLF and only CRLF at the ends
> of lines. I tested this with a base-64 decoder outside of my newsreader,
> to avoid any possibility that my newsreader might be modifying the line
> ends after decoding.

I accept that TB is doing that (I think not just mine) several times
I've tried to stop it, but I fear I can't ... it's usually "lured" into
doing base64 by a particular sequence of messages, suggestions welcome ...

Subject: Re: Malicious USB Interfaces In Airports
From: Ralph Fox
Newsgroups: comp.misc
Organization: Forte - www.forteinc.com
Date: Tue, 11 Jun 2024 01:16 UTC
References: 1 2 3 4 5 6 7
Path: eternal-september.org!news.eternal-september.org!feeder3.eternal-september.org!usenet.blueworldhosting.com!diablo1.usenet.blueworldhosting.com!peer03.iad!feed-me.highwinds-media.com!news.highwinds-media.com!fx47.iad.POSTED!not-for-mail
From: -rf-nz-@-.invalid (Ralph Fox)
Newsgroups: comp.misc
Subject: Re: Malicious USB Interfaces In Airports
Message-ID: <1c9f6jpnfohsv8f669qjpls7108jiv3qve@4ax.com>
References: <v3u0o5$1tsmd$1@dont-email.me> <lcftdfFlf5sU1@mid.individual.net> <bzE8O.16$vNb3.1@fx17.iad> <5br66jp0u5gdvppc8nm9j2rmug0piq02uc@4ax.com> <i8L8O.3646$cLn1.143@fx18.iad> <4k4c6jp10hpmbm21hh0eoi01pnd0659s9c@4ax.com> <lcmj0vFkrvgU1@mid.individual.net>
User-Agent: ForteAgent/8.00.32.1272
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
X-Face: 5gSW~"1=jGDo(BXfTrgL2BnC3tUB_\d0u@mP~wA1fvK`z8I[>1jXVVZ!N6ittQ.K<5!i3l> ==jcyAk.[B>kLg8TY{+8%edZ(le:ncPt%s8Pr?]QXNXO]0RC#V_zt|%>=bt>rZ2iCI^-yl7Be(]Ep> OfyI!3Bf|e
Lines: 44
X-Complaints-To: abuse@easynews.com
Organization: Forte - www.forteinc.com
X-Complaints-Info: Please be sure to forward a copy of ALL headers otherwise we will be unable to process your complaint properly.
Date: Tue, 11 Jun 2024 13:16:53 +1200
X-Received-Bytes: 2868
View all headers

On Sun, 9 Jun 2024 21:52:45 +0100, Andy Burns wrote:
> Ralph Fox wrote:
>
>> Andy's message body is base-64 encoded. Mine is not.
>>
>> When I run Andy's raw base-64 message body through a base-64 decoder,
>> the messageafter decoding also has CRLF and only CRLF at the ends
>> of lines. I tested this with a base-64 decoder outside of my newsreader,
>> to avoid any possibility that my newsreader might be modifying the line
>> ends after decoding.
>
> I accept that TB is doing that (I think not just mine) several times
> I've tried to stop it, but I fear I can't ... it's usually "lured" into
> doing base64 by a particular sequence of messages, suggestions welcome ...

Just to be clear, I am not complaining. My newsreader automatically
decodes base-64. I would not even know a message is base-64 encoded
unless I look at the raw message source (like TB's Ctrl+U).

As for why TB is doing that, I suspect it is because your Thunderbird's
preference 'mail.strictly_mime' is set to true. The default is false.

When preference 'mail.strictly_mime' is set to true, Thunderbird will
MIME-encode (quoted-printable or base-64) bodies containing characters
outside the 7-bit US-ASCII range.

When I set 'mail.strictly_mime' is set to true, compose a reply to
Lawrence's post with the 'curly' quotes, and put it in the Outbox,
in that case my reply _is_ base-64 encoded. But I do not know why
Thunderbird is choosing to use base-64 over quoted-printable.
* If the body contains over ~20% 8-bit _bytes_, MIME base-64 is
more efficient than MIME quoted-printable.
* But in this case the body has less than ~20% 8-bit bytes, so
quoted-printable would be more efficient.

--
Kind regards
Ralph Fox
🦊

The wind keeps not always in one quarter.

Subject: Re: Malicious USB Interfaces In Airports
From: Ralph Fox
Newsgroups: comp.misc
Organization: Forte - www.forteinc.com
Date: Tue, 11 Jun 2024 04:09 UTC
References: 1 2 3 4 5 6 7
Path: eternal-september.org!news.eternal-september.org!feeder3.eternal-september.org!usenet.blueworldhosting.com!diablo1.usenet.blueworldhosting.com!peer02.iad!feed-me.highwinds-media.com!news.highwinds-media.com!fx17.iad.POSTED!not-for-mail
From: -rf-nz-@-.invalid (Ralph Fox)
Newsgroups: comp.misc
Subject: Re: Malicious USB Interfaces In Airports
Message-ID: <mdjf6jduvi2p6s9r4ocer4hav66orukh7k@4ax.com>
References: <v3u0o5$1tsmd$1@dont-email.me> <lcftdfFlf5sU1@mid.individual.net> <bzE8O.16$vNb3.1@fx17.iad> <5br66jp0u5gdvppc8nm9j2rmug0piq02uc@4ax.com> <lchai5Fs780U1@mid.individual.net> <vlm76jt8oiphgh97jpvlkemmair3hl767v@4ax.com> <lcirtqF4hojU1@mid.individual.net>
User-Agent: ForteAgent/8.00.32.1272
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
X-Face: 5gSW~"1=jGDo(BXfTrgL2BnC3tUB_\d0u@mP~wA1fvK`z8I[>1jXVVZ!N6ittQ.K<5!i3l> ==jcyAk.[B>kLg8TY{+8%edZ(le:ncPt%s8Pr?]QXNXO]0RC#V_zt|%>=bt>rZ2iCI^-yl7Be(]Ep> OfyI!3Bf|e
Lines: 48
X-Complaints-To: abuse@easynews.com
Organization: Forte - www.forteinc.com
X-Complaints-Info: Please be sure to forward a copy of ALL headers otherwise we will be unable to process your complaint properly.
Date: Tue, 11 Jun 2024 16:09:10 +1200
X-Received-Bytes: 2918
View all headers

On Sat, 8 Jun 2024 12:00:10 +0100, Andy Burns wrote:
> Ralph Fox wrote:
>
>> Using the latest Thunderbird 115.11.1 on Windows...
>>
>> * When I compose a reply to Lawrence's post with the 'curly' quotes
>> and put it in the Outbox, my reply is not base-64 encoded.
>
> Several times I've half-arsedly looked into what causes my TB to use
> base64, after looking in a hex editor, it always seems to occur after a
> perfect storm combination of user-agents, content-types,
> character-encodings etc
>
> Maybe I have some ancient about:config setting that I can't remember?
>
> I've never managed to get even close to being able to log a good
> bugzilla ticket.
>
>> * I would like to try composing my reply with various character
>> encodings/charsets, but current Thunderbird 115.11.1 does not seem
>> to have that option any more.
>
> Tools/Accounts/[ServerName]/ServerSettings/DefaultTextEncoding

The above setting did not affect the charset of my reply. Even though
the above setting was (already) set to "windows-1252", Thunderbird used
the UTF-8 charset for the reply I composed to Lawrence's post.

Also, the above setting is only present for news servers, not for email
servers. I expect that a setting to control the charset of _outgoing_
messages would be available for both email and news.

At one time you could specify the character encoding for an outgoing
message from its Compose window menu "Options >> Character Encoding".
<http://kb.mozillazine.org/Font_settings_in_Thunderbird#Character_encoding>.
Similar to how you still can in SeaMonkey. See this screen-shot from
SeaMonkey:
<http://img4.imagetitan.com/img.php?image=27_lchai5__text-encoding-menu-on-the-compose-window-in-seamonkey.png>

--
Kind regards
Ralph Fox
🦊

Grass grows not upon the high way.

Subject: Re: Malicious USB Interfaces In Airports
From: Dave Yeo
Newsgroups: comp.misc
Date: Fri, 14 Jun 2024 23:15 UTC
References: 1 2 3 4 5 6 7 8
Path: eternal-september.org!news.eternal-september.org!feeder3.eternal-september.org!panix!usenet.blueworldhosting.com!diablo1.usenet.blueworldhosting.com!peer01.iad!feed-me.highwinds-media.com!news.highwinds-media.com!fx35.iad.POSTED!not-for-mail
Subject: Re: Malicious USB Interfaces In Airports
Newsgroups: comp.misc
References: <v3u0o5$1tsmd$1@dont-email.me> <lcftdfFlf5sU1@mid.individual.net>
<bzE8O.16$vNb3.1@fx17.iad> <5br66jp0u5gdvppc8nm9j2rmug0piq02uc@4ax.com>
<lchai5Fs780U1@mid.individual.net>
<vlm76jt8oiphgh97jpvlkemmair3hl767v@4ax.com>
<lcirtqF4hojU1@mid.individual.net>
<mdjf6jduvi2p6s9r4ocer4hav66orukh7k@4ax.com>
From: dave.r.yeo@gmail.com (Dave Yeo)
User-Agent: Mozilla/5.0 (OS/2; Warp 4.5; rv:45.0) Gecko/20100101 Firefox/45.0
SeaMonkey/2.42.9esr
MIME-Version: 1.0
In-Reply-To: <mdjf6jduvi2p6s9r4ocer4hav66orukh7k@4ax.com>
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit
Lines: 51
Message-ID: <qa4bO.3109$FZWf.1051@fx35.iad>
X-Complaints-To: https://www.astraweb.com/aup
NNTP-Posting-Date: Fri, 14 Jun 2024 23:15:34 UTC
Date: Fri, 14 Jun 2024 16:15:33 -0700
X-Received-Bytes: 3147
View all headers

Ralph Fox wrote:
> On Sat, 8 Jun 2024 12:00:10 +0100, Andy Burns wrote:
>> Ralph Fox wrote:
>>
>>> Using the latest Thunderbird 115.11.1 on Windows...
>>>
>>> * When I compose a reply to Lawrence's post with the 'curly' quotes
>>> and put it in the Outbox, my reply is not base-64 encoded.
>>
>> Several times I've half-arsedly looked into what causes my TB to use
>> base64, after looking in a hex editor, it always seems to occur after a
>> perfect storm combination of user-agents, content-types,
>> character-encodings etc
>>
>> Maybe I have some ancient about:config setting that I can't remember?
>>
>> I've never managed to get even close to being able to log a good
>> bugzilla ticket.
>>
>>> * I would like to try composing my reply with various character
>>> encodings/charsets, but current Thunderbird 115.11.1 does not seem
>>> to have that option any more.
>>
>> Tools/Accounts/[ServerName]/ServerSettings/DefaultTextEncoding
>
>
> The above setting did not affect the charset of my reply. Even though
> the above setting was (already) set to "windows-1252", Thunderbird used
> the UTF-8 charset for the reply I composed to Lawrence's post.
>
> Also, the above setting is only present for news servers, not for email
> servers. I expect that a setting to control the charset of _outgoing_
> messages would be available for both email and news.
>
>
> At one time you could specify the character encoding for an outgoing
> message from its Compose window menu "Options >> Character Encoding".
> <http://kb.mozillazine.org/Font_settings_in_Thunderbird#Character_encoding>.
> Similar to how you still can in SeaMonkey. See this screen-shot from
> SeaMonkey:
> <http://img4.imagetitan.com/img.php?image=27_lchai5__text-encoding-menu-on-the-compose-window-in-seamonkey.png>
>
>

Have you looked at about:config, Tools-->Options-->Advanced-->Config
Editor...
In my old Thunderbird I see mailnews.send_default_charset;UTF-8 I guess
you could change it to Windows-1252. Or simply use SeaMonkey. With some
config editing, you could probably share your news directories, unless
Thunderbird has changed something.
Dave

Subject: Re: Malicious USB Interfaces In Airports
From: Ralph Fox
Newsgroups: comp.misc
Organization: Forte - www.forteinc.com
Date: Sat, 15 Jun 2024 04:34 UTC
References: 1 2 3 4 5 6 7 8 9
Path: eternal-september.org!news.eternal-september.org!feeder3.eternal-september.org!news.chmurka.net!usenet.blueworldhosting.com!diablo1.usenet.blueworldhosting.com!peer03.iad!feed-me.highwinds-media.com!news.highwinds-media.com!fx03.iad.POSTED!not-for-mail
From: -rf-nz-@-.invalid (Ralph Fox)
Newsgroups: comp.misc
Subject: Re: Malicious USB Interfaces In Airports
Message-ID: <vd6q6jlmnc8sa9cbeg8a21cfidvl7ditjf@4ax.com>
References: <v3u0o5$1tsmd$1@dont-email.me> <lcftdfFlf5sU1@mid.individual.net> <bzE8O.16$vNb3.1@fx17.iad> <5br66jp0u5gdvppc8nm9j2rmug0piq02uc@4ax.com> <lchai5Fs780U1@mid.individual.net> <vlm76jt8oiphgh97jpvlkemmair3hl767v@4ax.com> <lcirtqF4hojU1@mid.individual.net> <mdjf6jduvi2p6s9r4ocer4hav66orukh7k@4ax.com> <qa4bO.3109$FZWf.1051@fx35.iad>
User-Agent: ForteAgent/8.00.32.1272
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
X-InReplyTo-Permalink: hxxps://comp.misc.narkive.com/dPrzzpyR/malicious-usb-interfaces-in-airports#post20 hxxps://www.rocksolidbbs.com/computers/article-flat.php?id=4348&group=comp.misc#4348
X-Face: 5gSW~"1=jGDo(BXfTrgL2BnC3tUB_\d0u@mP~wA1fvK`z8I[>1jXVVZ!N6ittQ.K<5!i3l> ==jcyAk.[B>kLg8TY{+8%edZ(le:ncPt%s8Pr?]QXNXO]0RC#V_zt|%>=bt>rZ2iCI^-yl7Be(]Ep> OfyI!3Bf|e
Lines: 39
X-Complaints-To: abuse@easynews.com
Organization: Forte - www.forteinc.com
X-Complaints-Info: Please be sure to forward a copy of ALL headers otherwise we will be unable to process your complaint properly.
Date: Sat, 15 Jun 2024 16:34:25 +1200
X-Received-Bytes: 2770
View all headers

On Fri, 14 Jun 2024 16:15:33 -0700, Dave Yeo wrote:
> Ralph Fox wrote:
>>
>> At one time you could specify the character encoding for an outgoing
>> message from its Compose window menu "Options >> Character Encoding".
>> <http://kb.mozillazine.org/Font_settings_in_Thunderbird#Character_encoding>.
>> Similar to how you still can in SeaMonkey. See this screen-shot from
>> SeaMonkey:
>> <http://img4.imagetitan.com/img.php?image=27_lchai5__text-encoding-menu-on-the-compose-window-in-seamonkey.png>
>>
>
> Have you looked at about:config, Tools-->Options-->Advanced-->Config
> Editor...
> In my old Thunderbird I see mailnews.send_default_charset;UTF-8 I guess
> you could change it to Windows-1252.

That about:config preference is not in Thunderbird version 115.11.1
(the current release).

> Or simply use SeaMonkey. With some
> config editing, you could probably share your news directories, unless
> Thunderbird has changed something.
> Dave

I am happy sending email in us-ascii or UTF-8.

The discussion was whether the sending charset had anything to do with
Andy's posts being base64 encoded. I think not. I suspect Andy's posts
are base64 encoded when they contain non-ASCII characters (no matter
what the charset) because I suspect Andy's Thunderbird preference
'mail.strictly_mime' is set to true.

--
Kind regards
Ralph Fox
🦊

Every ones faults are not written in their foreheads.

Subject: Re: Malicious USB Interfaces In Airports
From: Andy Burns
Newsgroups: comp.misc
Date: Sat, 15 Jun 2024 08:22 UTC
References: 1 2 3 4 5 6 7 8 9 10
Path: eternal-september.org!news.eternal-september.org!feeder3.eternal-september.org!fu-berlin.de!uni-berlin.de!individual.net!not-for-mail
From: usenet@andyburns.uk (Andy Burns)
Newsgroups: comp.misc
Subject: Re: Malicious USB Interfaces In Airports
Date: Sat, 15 Jun 2024 09:22:21 +0100
Lines: 20
Message-ID: <ld519tFr28aU2@mid.individual.net>
References: <v3u0o5$1tsmd$1@dont-email.me> <lcftdfFlf5sU1@mid.individual.net>
<bzE8O.16$vNb3.1@fx17.iad> <5br66jp0u5gdvppc8nm9j2rmug0piq02uc@4ax.com>
<lchai5Fs780U1@mid.individual.net>
<vlm76jt8oiphgh97jpvlkemmair3hl767v@4ax.com>
<lcirtqF4hojU1@mid.individual.net>
<mdjf6jduvi2p6s9r4ocer4hav66orukh7k@4ax.com> <qa4bO.3109$FZWf.1051@fx35.iad>
<vd6q6jlmnc8sa9cbeg8a21cfidvl7ditjf@4ax.com>
Mime-Version: 1.0
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit
X-Trace: individual.net RkIBrzW6j0ZnyG6gajY2qAXBl2ihQi74Sv7T0ZZ0xgMxE2lOeB
Cancel-Lock: sha1:m3k1x/EbrVeXT2XcFs6qZ/h9EWg= sha256:UYrXa9k5Wf4RDvbSo+89Xd+Kxxrise0K2pW0Miw6pgM=
User-Agent: Mozilla Thunderbird
Content-Language: en-GB
In-Reply-To: <vd6q6jlmnc8sa9cbeg8a21cfidvl7ditjf@4ax.com>
View all headers

Ralph Fox wrote:

> I suspect Andy's posts
> are base64 encoded when they contain non-ASCII characters

Yes, I did tests several months ago

> (no matter
> what the charset) because I suspect Andy's Thunderbird preference
> 'mail.strictly_mime' is set to true.

With various charsets, with/without the "strictly" setting, on messages
that were 7-bit clean or otherwise.

My conclusion was that everything annoys somebody, but the least
annoying overall is to embrace UTF-8 and put up with base64 where it
isn't really required.

Subject: Re: Malicious USB Interfaces In Airports
From: Eric Pozharski
Newsgroups: comp.misc
Organization: A noiseless patient Spider
Date: Sat, 15 Jun 2024 16:58 UTC
References: 1 2 3 4 5 6 7 8 9 10
Path: eternal-september.org!news.eternal-september.org!.POSTED!not-for-mail
From: apple.universe@posteo.net (Eric Pozharski)
Newsgroups: comp.misc
Subject: Re: Malicious USB Interfaces In Airports
Date: Sat, 15 Jun 2024 16:58:42 +0000
Organization: A noiseless patient Spider
Lines: 27
Message-ID: <slrnv6ri22.lrj.apple.universe@freight.zombinet>
References: <v3u0o5$1tsmd$1@dont-email.me>
<lcftdfFlf5sU1@mid.individual.net> <bzE8O.16$vNb3.1@fx17.iad>
<5br66jp0u5gdvppc8nm9j2rmug0piq02uc@4ax.com>
<lchai5Fs780U1@mid.individual.net>
<vlm76jt8oiphgh97jpvlkemmair3hl767v@4ax.com>
<lcirtqF4hojU1@mid.individual.net>
<mdjf6jduvi2p6s9r4ocer4hav66orukh7k@4ax.com>
<qa4bO.3109$FZWf.1051@fx35.iad>
<vd6q6jlmnc8sa9cbeg8a21cfidvl7ditjf@4ax.com>
Injection-Date: Sat, 15 Jun 2024 19:33:08 +0200 (CEST)
Injection-Info: dont-email.me; posting-host="ba94d2fb2fd68885c838bb8babb49f16";
logging-data="3756385"; mail-complaints-to="abuse@eternal-september.org"; posting-account="U2FsdGVkX19FVT2YZ3oUiGu2KhbsdAiL"
User-Agent: slrn/1.0.3 (Linux)
Cancel-Lock: sha1:9of6LddK6HD61ZAXiNBPXJWIkVE=
View all headers

with <vd6q6jlmnc8sa9cbeg8a21cfidvl7ditjf@4ax.com> Ralph Fox wrote:
> On Fri, 14 Jun 2024 16:15:33 -0700, Dave Yeo wrote:
>> Ralph Fox wrote:

>>> At one time you could specify the character encoding for an outgoing
>>> message from its Compose window menu "Options >> Character Encoding".
>>> <http://kb.mozillazine.org/Font_settings_in_Thunderbird#Character_encoding>.
*SKIP* [ 5 lines 3 levels deep]
>> Have you looked at about:config, Tools-->Options-->Advanced-->Config
>> Editor...
>> In my old Thunderbird I see mailnews.send_default_charset;UTF-8 I guess
>> you could change it to Windows-1252.
> That about:config preference is not in Thunderbird version 115.11.1
> (the current release).

(disclaimer: I'm TB ignorant, but) In FF-current setting 'User-Agent:'
is secret option (it's missing from about:preferences and about:config),
it must be created manually. I speculate, setting 'Content-Type:
charset=' in TB-current *might be* secret option. That being said, this
implies two things: more digging through documentation and/or search
results, and hoping one day it won't be ignored forever.

*CUT* [ 15 lines 2 levels deep]

--
Torvalds' goal for Linux is very simple: World Domination
Stallman's goal for GNU is even simpler: Freedom

Subject: Re: Malicious USB Interfaces In Airports
From: Computer Nerd Kev
Newsgroups: comp.misc
Organization: Ausics - https://newsgroups.ausics.net
Date: Sat, 15 Jun 2024 23:23 UTC
References: 1 2 3 4 5 6 7 8 9 10 11
Message-ID: <666e2259@news.ausics.net>
From: not@telling.you.invalid (Computer Nerd Kev)
Subject: Re: Malicious USB Interfaces In Airports
Newsgroups: comp.misc
References: <v3u0o5$1tsmd$1@dont-email.me> <lcftdfFlf5sU1@mid.individual.net> <bzE8O.16$vNb3.1@fx17.iad> <5br66jp0u5gdvppc8nm9j2rmug0piq02uc@4ax.com> <lchai5Fs780U1@mid.individual.net> <vlm76jt8oiphgh97jpvlkemmair3hl767v@4ax.com> <lcirtqF4hojU1@mid.individual.net> <mdjf6jduvi2p6s9r4ocer4hav66orukh7k@4ax.com> <qa4bO.3109$FZWf.1051@fx35.iad> <vd6q6jlmnc8sa9cbeg8a21cfidvl7ditjf@4ax.com> <ld519tFr28aU2@mid.individual.net>
User-Agent: tin/2.0.1-20111224 ("Achenvoir") (UNIX) (Linux/2.4.31 (i586))
NNTP-Posting-Host: news.ausics.net
Date: 16 Jun 2024 09:23:06 +1000
Organization: Ausics - https://newsgroups.ausics.net
Lines: 27
X-Complaints: abuse@ausics.net
Path: eternal-september.org!news.eternal-september.org!feeder3.eternal-september.org!news.bbs.nz!news.ausics.net!not-for-mail
View all headers

Andy Burns <usenet@andyburns.uk> wrote:
> Ralph Fox wrote:
>> I suspect Andy's posts are base64 encoded when they contain
>> non-ASCII characters
>
> Yes, I did tests several months ago
>
>> (no matter what the charset) because I suspect Andy's
>> Thunderbird preference 'mail.strictly_mime' is set to true.
>
> With various charsets, with/without the "strictly" setting, on
> messages that were 7-bit clean or otherwise.
>
> My conclusion was that everything annoys somebody,

True, personally UTF-8 annoys me more, but not enough to complain
to people using it.

> but the least annoying overall is to embrace UTF-8

Argh, down that road people end up using emojis everywhere like
they do on some web forums. I might start complaining if people
embraced Unicode that much on Usenet.

--
__ __
#_ < |\| |< _#

1

rocksolid light 0.9.8
clearnet tor