<story><title>I Tested an HDMI Adapter That Demands Your Location and Spams You with Ads</title><url>https://www.404media.co/i-tested-an-hdmi-adapter-that-demands-your-location-browsing-data-photos-and-spams-you-with-ads/</url></story><parent_chain><item><author>cwoolfe</author><text>Given that the device is plugged in, trusted, shows up as a computer, and requires external power, it has all the connections it needs spy on the screen (at minimum) and remote control the victim iPhone without permission in the worst case. (it has video feed, and can emulate USB keyboard and mouse) Yikes!</text></item></parent_chain><comment><author>upwardbound</author><text>Agreed.  If you want to prove to yourself that this vulnerability is real, consider that you can replicate the hypothesized malicious device you describe by taking a WiFi Duck &lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;wifiduck.com&amp;#x2F;&quot; rel=&quot;nofollow noreferrer&quot;&gt;https:&amp;#x2F;&amp;#x2F;wifiduck.com&amp;#x2F;&lt;/a&gt; and combining it with a regular lightning-to-HDMI adapter by plugging the WiFi Duck into the extra lightning port on the HDMI adapter.  All that would be needed to use this attack on an unsuspecting victim would be to combine the WiFi Duck and the HDMI adapter functionality into a small enough circuit board to fit into the Apple-style white enclosure.</text></comment>
<story><title>I Tested an HDMI Adapter That Demands Your Location and Spams You with Ads</title><url>https://www.404media.co/i-tested-an-hdmi-adapter-that-demands-your-location-browsing-data-photos-and-spams-you-with-ads/</url></story><parent_chain><item><author>cwoolfe</author><text>Given that the device is plugged in, trusted, shows up as a computer, and requires external power, it has all the connections it needs spy on the screen (at minimum) and remote control the victim iPhone without permission in the worst case. (it has video feed, and can emulate USB keyboard and mouse) Yikes!</text></item></parent_chain><comment><author>jjoonathan</author><text>Integrating everything into USB has been great at physical simplification, but it really opened up the attack surface.&lt;p&gt;First party malware is the worst.</text></comment>