Hackers Steal Private Data from Public Charging Stations
Feb 22, 2017, 5:55 pm
#1
Moderator: Travel Safety/Security, Travel Tools, California, Los Angeles; FlyerTalk Evangelist
Original Poster
Join Date: Dec 2009
Location: LAX
Programs: oneword Emerald
Posts: 20,711
Hackers Steal Private Data from Public Charging Stations
‘Juice-jacking:’ how hackers steal your private data from public charging stations
Beware of Juice-Jacking
All it takes is one easily disguised charging kiosk, or even a power strip, for hackers to hijack your charge, and once you’re juice-jacked, there’s little that can be done to stop it; from installing malware onto your device, to sucking out personal messages, photos and information - all for the simple cost of offering sweet-relief and a fully-powered phone.
The safest route for charging your device on-the-go is to use the supplied power cord that plugs into a regular electrical outlet (assuming you can find an available outlet). Battery-powered mobile charging devices also work well in a pinch and are available at many airports. If you must use a random charging kiosk, the safest option may be to completely power off the device before plugging it in.
Feb 22, 2017, 8:32 pm
#2
FlyerTalk Evangelist
Join Date: Jun 2005
Posts: 38,417
Or use a cable or adapter that only passes through the power, not the data.
It certainly is an issue otherwise. Some days ago I was out, a friend of my wife's came over and her phone was whining about a low battery.
I come home to find an iPhone laying on my desk, a wire heading off to a hub. I also find that charging the phone caused iTunes to launch and show me stuff from the phone. (The screen was no doubt blanked when she plugged it in, she would not have been aware of iTunes launching.)
It certainly is an issue otherwise. Some days ago I was out, a friend of my wife's came over and her phone was whining about a low battery.
I come home to find an iPhone laying on my desk, a wire heading off to a hub. I also find that charging the phone caused iTunes to launch and show me stuff from the phone. (The screen was no doubt blanked when she plugged it in, she would not have been aware of iTunes launching.)
Feb 23, 2017, 5:21 pm
#3
Join Date: Jan 2015
Posts: 2,924
Another suggestion is to use a USB condom (don't laugh). It makes a USB cable effectively just a charge cable. Small, light and don't take up a lot of space in my travel pack. However, my preference is a power bank. Then I'm not tied to one spot while doing other things. The only catch is that it takes much longer to recharge the bank than the phone itself.
Feb 23, 2017, 8:03 pm
#5
FlyerTalk Evangelist
Join Date: Jun 2005
Posts: 38,417
Another suggestion is to use a USB condom (don't laugh). It makes a USB cable effectively just a charge cable. Small, light and don't take up a lot of space in my travel pack. However, my preference is a power bank. Then I'm not tied to one spot while doing other things. The only catch is that it takes much longer to recharge the bank than the phone itself.
Feb 23, 2017, 8:04 pm
#6
Join Date: Jul 2007
Location: San Francisco/Sydney
Programs: UA 1K/MM, Hilton Diamond, Marriott Something, IHG Gold, Hertz PC, Avis PC
Posts: 8,163
Recent versions of Android avoid this by defaulting to a 'charge only' mode. You need to unlock the device and select to change the mode (each and every time, at least by default) before it shows up as something more than a charging device.
This isn't anything new - in fact the Krebs article you linked to is from 2011.
This isn't anything new - in fact the Krebs article you linked to is from 2011.
Feb 24, 2017, 6:28 am
#8
FlyerTalk Evangelist
Join Date: Jan 2008
Location: HEL
Programs: lots of shiny metal cards
Posts: 14,111
In Appleland, when you connect your phone via USB it asks you if you want to allow the device to access your phone. Happens every time when I plug in my phone to the USB slot onboard an aircraft.
If you say no, then it charges only.
If you say no, then it charges only.
Feb 24, 2017, 3:57 pm
#9
Join Date: Nov 2000
Location: Upcountry Maui, HI
Posts: 13,315
https://support.apple.com/en-us/HT202778
Loren, somebody said "yes" or it had been plugged into that computer and trusted previously. So getting people to answer correctly may be another issue, I suppose.
-David
Feb 24, 2017, 6:03 pm
#10
FlyerTalk Evangelist
Join Date: Jun 2005
Posts: 38,417
"Do you trust this computer?"
https://support.apple.com/en-us/HT202778
Loren, somebody said "yes" or it had been plugged into that computer and trusted previously. So getting people to answer correctly may be another issue, I suppose.
-David
https://support.apple.com/en-us/HT202778
Loren, somebody said "yes" or it had been plugged into that computer and trusted previously. So getting people to answer correctly may be another issue, I suppose.
-David
Feb 26, 2017, 4:36 pm
#11
Join Date: Feb 2001
Location: London
Programs: AA EXP, SPG Plt
Posts: 2,607
I like these USB condoms. I keep one w/ a cable tie and key ring attached to each of my travel Lightning cables. Plus it often can speed up the charge.
https://www.amazon.co.uk/d/Electroni...CKYRF0B5QV71JZ
https://www.amazon.co.uk/d/Electroni...CKYRF0B5QV71JZ
Mar 1, 2017, 12:00 pm
#12
Join Date: Apr 2007
Location: EWR
Programs: Global Entry, TSA PreCheck, UA Premier, Marriott Titanium Elite
Posts: 188
When CSI: Cyber was still on TV a year or 2 ago, they actually had an episode that was about juice jacking. Didn't even know about the concept until I saw this episode.