I like to read replies to posts like this just to remind myself how misinformed the general public is about “USB-C”
So here is a thread looking at a few of them…
🧵1
First, USB-C is a specification for the physical connector. NOT the protocol. And it intentionally supports multiple protocols like USB, USB-PD, Thunderbolt, DisplayPort, HDMI, PCIe, etc.
Some protocols exclusively use USB-c, like USB-4, Thunderbolt 3 & 4, USB-PD.
🧵2
Now, because a high quality C to C cable can support ALL of these protocols, people incorrectly think the protocols are the same thing.
🧵3
And a lot of it has a belief that USB-C is somehow anti-Apple.
Reality: Apple (& Intel) designed USB-C.
The USB-Implementers Forum is responsible for USB-4, USB-PD, and many others. There are a lot of companies on the USB-IF, including Apple!
🧵4
A lot of people celebrate the cable “standardization” & low cost availability. It’s becoming common knowledge that there are 8 types of compliant cables. But people don’t understand that quality matters. Else, you get perceptions like this:
🧵5
Most people with wired CarPlay that switched from a lighting cable to usb-c will notice how much more fragile the connection is if using cheap cables. That’s because the moving parts went from the socket (lightning) to the cable (USB-C). So cable quality matters more.
🧵6
It really is impressive how confidently wrong people are about this stuff. But also how it’s almost like it challenges their identity or something 😂
Anyway, if I left anything out, let me know.
🧵7
To reiterate, a lot of companies are involved in the USB-IF now.
One of the most inspirational & enlightening people in the USB-C space, for me, is @Laughing_Man. He opened my eyes to the complexity, beauty, & horrors of USB-C.
🧵8
Correction: The idea that Apple/Intel invented C & gave it to USB-IF is based on an industry rumor citation. It’s believable with the timing & numerous similarities with Lightning, but only rumor.
Apple is still on USB-IF, so trying to say C is anti-Apple is silly either way
🧵9
Lotta people getting defensive 😂
USB C (& even earlier USB) is a confusing mess, as my thread shows & tries to inform. Especially with all the protocols & cable types.
The screenshots of confident-but-wrong “correction” reply guys isn’t purely a spec problem though :p
🧵10
Yes, if you aren’t aware, there are 8 possible spec compliant C to C cables.
Lets not count the non-compliant ones 😂
USB-IF has a labeling proposal to “fix” this. But mfgs are also YOLOing it and making cables look like NASCAR logos
🧵11 people.kernel.org/bleung/
Here are the logos that USB-IF released in late 2021. Only cables that have been certified by USB-IF will be allowed to have the logos. And they must have the logo to get certified.
Yet somehow the Apple cable I bought yesterday doesn’t have any of them. 🤷♂️
🧵12
lmao, 12hrs later and people are acting like I personally designed these specs.
Quite the contrary. I make USB cables that abuse these specs, like the OMG Cable.
Anyway, there are some good questions too, so I’ll try to update this thread.
🧵13
For people asking for details on “moving parts”, here’s a graphic. This is NOT the only way a connector fails, but cheap metal loses its spring much faster.
Spec says the connectors should achieve 10k+ mating cycles. But bottom price cables generally aren’t to spec…
🧵14
For people asking how to pick a good cable… ehhh 🤷♂️
Figure out which of the 8 possible cables fits your need (post #11) and then find one that was certified by USB-IF with a logo (post #12) or some trusted brands.
Or YOLO it, test them, & don’t be sad when they die.
🧵15
Somehow this turned into an AMA about USB-C. So let’s go with it. Next most common question I’m seeing: “why doesn’t <device> charge from USB-C?”
Answer: cause the maker didn’t bother to read the spec. But there is usually a fix! (Next post).
I see the is failure a lot. Ex:
🧵16
So, if your poorly designed device won’t charge or power up with a C to C cable, try converting it to USB-A and back again. Adapter MUST be on the Charger/Host side!
Also, try flipping the connector on the device side, just incase they really screwed it up.
🧵17
@seb_mc2 Even if Apple’s only involvement was via USB-IF, it still makes the weird anti-Apple views pretty silly. I just want to know about the 2012 piece for personal curiosity.
@seb_mc2 Lighting: released in 2012, compact, reversible, orientation marker in cable, host/device responsible for reorienting, reconfigurable pins, etc
USB-C: same, but more pins and reversed mechanical. 2014
Could also be industry response to Lightning? 🤷♂️
I WANT TO KNOW!
@CinnamonComfy @calicodev There is no scenario that I can imagine where simply using a C to C cable what supports higher wattage will result in failure to power on when a lower wattage one works fine. So far more info is needed.
@CinnamonComfy But if we are making guesses with insufficient info, context clues suggest that @calicodev doesn’t actually have the theoretical 100w cable and is wondering why 100w is unsafe for a 60w device. (Which is not actually unsafe at all)
Sketchy cables aren’t just a risk of annoyance. Safety is an issue too, especially with the recent enhancements to USB-PD allowing up to 240w. Design considerations now include electrical arcing! ⚠️⚡️
Probably good if the mfg has read the specs!
“recognized as malware” is the end of the analysis? Bruh…
At least share the exe so others can check it out and either validate this or put the nail in the coffin.
There are so many ways something gets flagged without it being malicious itself. Down to being simply unsigned.
The chances of this being intentionally malicious are very low. And you haven’t done nearly enough to demonstrate otherwise.
That doesn’t mean it’s necessarily safe. You paid pennies above the cost of the hardware via AliExpress. That gets you the lowest effort software too, where security is not a concern.
Imagine buying DIY canned food from an alley and then pearl clutching when it’s not FDA approved… and then acting like the makers are spies trying to poison you. 🙃
Prove it!
Don’t get me wrong. China is an intentional adversary in many avenues. But the threat posed by AliExpress & Temu is economic.
If you are buying lowest cost hardware, you aren’t getting any effort beyond basic functionality. Safety and security aren’t part of that. Don’t confuse that for intentionality.
COULD these things be leveraged by a 3rd party to undermine your security? Very likely. But you are just about as intentionally complicit in that as the seller.
When we added C2 capabilities to OMG Cable, people would say “But I’d notice it on my network!”
I said: yeah, but would you notice it on your neighbor’s wifi, free cafe wifi, etc? 😈
Also, here is a free nightmare: when wifi drops due to power loss, those battery powered IOT devices do ALL kinds of useful things if you’re in range.
Oh absolutely. Most places won’t notice. Especially with the added MAC spoofing and the C2 traffic looking like misc web traffic. There are lots of options before needing to use a nearby network, or supplying your own.
The exploding Hezbollah pagers situation is an incredibly impressive supply chain attack by Israel (most likely). I am sure more details will come, but there are already some educated guesses to be made that narrow it down.
🧵1/n
First, with over 1000 instances being reported, this is likely supply chain as opposed to a few modified devices. Done either during shipment and/or at the factory.
🧵2/n
2nd, the explosions are substantial. Probably a high explosive like RDX or PETN. I am guessing the explosive was integrated into the battery for physical stealth. But, unlike Israel, I don’t know if Hezbollah checks their internals for it to matter.
Lots of news stories about people getting fired for using mouse jigglers & simulated keyboard activity. There is also a LOT of misinformation.
Lets correct:
- why it’s detected
- how it’s detected
- how all commercial jigglers are detectable (even mechanical ones)
🧵1
Every large company has security tools running on employee computers. It’s critical for detecting breaches of security & providing trails of evidence to understand how. Employees bypassing inactivity timeouts get caught in the net & are easy to detect IF the company WANTS.
🧵2
Employees simulate keyboard/mouse activity to keep their computers awake/“active”. Especially when corp security policy mandates screen locking after X min of activity.
There are 2 areas that overlap with security software:
1 - USB identifiers
2 - Screen lock & unlock events
... but the option to expire the old passcode is not next to the "change passcode" button. So, it's easy to miss this new 72hr mechanism entirely. Not ideal...
Please fix this Apple
🧵2/n
At least put the UI elements next to each other so its more obvious. But also maybe consider whether an old passcode should be able to mess with iCould. Being able to do iCloud account resets, pulling device backups, etc... that feels like too much.
I lost $150k in hardware during shipping. The carrier closed the investigation with “it’s gone, sorry”
So I started working through their org. Getting internal info. Eventually “bribing” some of the employees to dig a little deeper.
🧵1/n
Then I found a local in China to help navigate the Chinese employees of the carrier. It actually worked! The package was found in one of the carrier’s facilities in China.
🧵2/n
The US employees couldn’t properly communicate with their own coworkers in China, even with an official investigation. Not even when “bribed” to do so. But an outsider could!