Stories
Slash Boxes
Comments

SoylentNews is people

SoylentNews is powered by your submissions, so send in your scoop. Only 18 submissions in the queue.
posted by martyb on Thursday January 03 2019, @01:15AM   Printer-friendly
from the both dept.

USB-C could soon offer protection against nefarious devices:

The program defines the optimal cryptographic-based authentication for USB-C devices and chargers. Any host system using this protocol will be able to confirm the authenticity of a device or charger, including descriptors and capabilities, right at the moment a connection is made. So say, for example, you're concerned about charging your phone at a public terminal. Your phone could implement a policy only allowing a charge from certified chargers. A company, meanwhile, could set a policy for its PCs, giving them access only to verified USB storage devices.

At this stage, the program is simply a recommendation -- there's no mandatory implementation required, but its creation certainly points to future security requirements for USB-C, which USB-IF president Jeff Ravencraft believes is "the single cable of the future."

USB Type-C Authentication Program gets started, sounds like it's effectively DRM for Type-C devices:

Today the USB-IF, the non-profit behind the USB standard's marketing and specifications, revealed the formal launch of its "USB Type-C™ Authentication Program," originally announced back in 2016. The optional program "defines cryptographic-based authentication for USB Type-C chargers and devices." If that sounds like a thinly veiled euphemism for hardware DRM to you, that's because it is.

The new authentication mechanism "empowers" vendors to "protect" us customers against "non-compliant USB chargers." Bad chargers and cables are/were a legitimate problem for the USB Type-C ecosystem (praise be to Benson), but the USB-IF's program allows for vendors to use this means of accessory certification for anything they choose. This isn't just a standard set by the USB-IF for cables and chargers to meet, any OEM can use it to bake-in support for only "approved" devices if they like. Remember when Apple clamped down on third-party hardware with its MFi certification program? Now USB-C-wielding OEMs can get in on some of that licensing action, and better, it's being done in the name of security.

In addition to pushing PD compliance, the nascent standard is being spun as a security enhancement, protecting us consumers from malicious firmware and hardware attached to USB devices. But even the marketing PR can't help but point out how useful it will be for OEMs in other, less consumer-friendly ways: "Using this protocol, host systems can confirm the authenticity of a USB device, USB cable or USB charger, including such product aspects as the capabilities and certification status."

Previously: USB Type-C Authentication Protocol Announced

Related: One Manufacturer's "Fundamentally Dangerous" USB Type-C Cable Fries Hardware
Amazon Bans Non-Compliant USB Type-C Cables


Original Submission

 
This discussion has been archived. No new comments can be posted.
Display Options Threshold/Breakthrough Mark All as Read Mark All as Unread
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
  • (Score: 2, Funny) by fustakrakich on Thursday January 03 2019, @04:21AM (3 children)

    by fustakrakich (6150) on Thursday January 03 2019, @04:21AM (#781386) Journal

    And AFAIAC, power shouldn't even need a jack: I've found wireless charging to be awesome.

    Yeah. Apple should take the hint with their damn mouse.

    --
    La politica e i criminali sono la stessa cosa..
    Starting Score:    1  point
    Moderation   +1  
       Funny=1, Total=1
    Extra 'Funny' Modifier   0  

    Total Score:   2  
  • (Score: 0) by Anonymous Coward on Thursday January 03 2019, @09:54AM (2 children)

    by Anonymous Coward on Thursday January 03 2019, @09:54AM (#781422)

    What does this have to do with Apples refusal to add right click to their mice by default?

    • (Score: 3, Interesting) by fyngyrz on Thursday January 03 2019, @02:51PM

      by fyngyrz (6567) on Thursday January 03 2019, @02:51PM (#781485) Journal

      Apples[sic] refusal to add right click to their mice

      Dude. You can't handle right-clicks. First it's confusion. Then carpel tunnel. Then corrective surgery. Then forearm hypertrophy. The you end up needing a custom coffin and extra preservative to properly mummify and fit your dominant arm. Finally, in the far future, forsenic anthropologists serve up your sliced palmar carpal ligament and oversized flexor digitorum superficialis as evidence for excessive masturbation in your lifetime.

      Go with what Apple wants. They know what's best for you.

      Courage, my AC friend. Courage.

      --
      We should start referring to "age" as "levels."
      So when you're LVL 80, you're awesome.

    • (Score: 1) by fustakrakich on Thursday January 03 2019, @04:50PM

      by fustakrakich (6150) on Thursday January 03 2019, @04:50PM (#781540) Journal

      Nothing to with clicks. Check out where they put the charging port...

      --
      La politica e i criminali sono la stessa cosa..