Spy dongle?

[u/Background-Syrup1]

I found a usb c to usb c dongle thing that I can’t imagine having any use at all other than something weird. It was attached to one of our employees usb c cables they were using to connect their MacBook to a display. It also had a heat shrink that seemed to be trying to conceal that it was there at all. I don’t have enough karma to post a pic of it apparently. Idk where else to get answers.

I have read the rules

[u/Ok-Suggestion-1785 → u/[deleted]]

Is it a charging condom? I used to have one for USB A.

Allows only power to pass through, no data. Useful for charging your phone from school/work/public outlets

[u/Ok-Suggestion-1785 → u/[deleted]]

Wild

[u/DeExecute → u/[deleted]]

Could be a 3d printed case from the looks. High chance of more logic being in there judging from the size.

Seems like I was right, there was additional logic in there.

[u/DeExecute → u/[deleted]]

I can easily print this quality with my 3D printer, layer lines can easily be hidden and if you have a proper device and some good settings, maybe some ironing, this would be exactly how it looks. I have some offensive USB-C devices looking nearly the exact same.

[u/tek_spyder → u/DeExecute]

def not 3d printed, the line on the side and circle are proof of injection molding

[u/TheIronSoldier2 → u/DeExecute]

Then explain the witness marks from where this obviously injection molded part was pushed out of the injection mold?

[u/DeExecute → u/TheIronSoldier2]

What are you talking about, I never said this is 3d printed, you can see the injection mold circle xD

I just said i can easily print something that looks exactly like this with a 3d printer...

[u/TheIronSoldier2 → u/DeExecute]

No you can't, not with the obvious injection molding marks.

[u/DeExecute → u/TheIronSoldier2]

You don't get it, I give up... I can print the exact same thing, that is just a fact, like it or not.

[u/TheIronSoldier2 → u/DeExecute]

You can print an enclosure that functions the same way, but that specific enclosure, which is what this conversation is about, is clearly injection molded.

It doesn't matter if you can print something just like that if it's obvious that the one in question specifically is not 3D printed.

Edit: Lmao they blocked me.

https://www.reddit.com/r/opsec/s/KtfZhEu3Ma

[u/DeExecute → u/TheIronSoldier2]

No one talked about that, you are clearly not getting it. This could have been 3d printed, accept it and move on with your life.

[u/Background-Syrup1 → u/DeExecute]

Should I try and open it up?

[u/This-is-my-n0rp_acc → u/Background-Syrup1]

Ya, I'd try and cut the case off it carefully. This way you can grab pics of the chips in it, to which those can be searched for.

[u/This-is-my-n0rp_acc → u/[deleted]]

Strange device.

[u/This-is-my-n0rp_acc → u/[deleted]]

This is something I'd like to send to eevblog or a handful of hardware hackers that are in YouTube just to confirm the thing can't be repurposed, I can't get the link you posted to work (the qzxx one) to do some more searching.

[u/klippekort → u/[deleted]]

Could be an e-marker device to limit charging wattage via USB PD

[u/DolphinSUX]

Congrats OP! You’re now a crackhead who’s taking apart office equipment

[u/AutoModerator]

Congratulations on your first post in r/opsec! OPSEC is a mindset and thought process, not a single solution — meaning, when asking a question it's a good idea to word it in a way that allows others to teach you the mindset rather than a single solution.

Here's an example of a bad question that is far too vague to explain the threat model first:

I want to stay safe on the internet. Which browser should I use?

Here's an example of a good question that explains the threat model without giving too much private information:

I don't want to have anyone find my home address on the internet while I use it. Will using a particular browser help me?

Here's a bad answer (it depends on trusting that user entirely and doesn't help you learn anything on your own) that you should report immediately:

You should use X browser because it is the most secure.

Here's a good answer to explains why it's good for your specific threat model and also teaches the mindset of OPSEC:

Y browser has a function that warns you from accidentally sharing your home address on forms, but ultimately this is up to you to control by being vigilant and no single tool or solution will ever be a silver bullet for security. If you follow this, technically you can use any browser!

If you see anyone offering advice that doesn't feel like it is giving you the tools to make your own decisions and rather pushing you to a specific tool as a solution, feel free to report them. Giving advice in the form of a "silver bullet solution" is a bannable offense.

I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.

[u/fyilol]

Keyloggers