{"id":7882,"date":"2012-09-22T15:36:13","date_gmt":"2012-09-22T19:36:13","guid":{"rendered":"http:\/\/scruss.com\/blog\/?p=7882"},"modified":"2013-01-26T07:39:57","modified_gmt":"2013-01-26T12:39:57","slug":"swagfail","status":"publish","type":"post","link":"https:\/\/scruss.com\/blog\/2012\/09\/22\/swagfail\/","title":{"rendered":"#swagfail"},"content":{"rendered":"

Put me out to pasture, my conference swag skills are failing.<\/p>\n

I picked this up at Solar Power International<\/a>:<\/p>\n

\"\"<\/p>\n

I thought<\/em> I was picking up a USB memory stick, as I’d nabbed one in the same form factor before. Break off the backing card at the hinge, and you’ve got a nice tiny data store like the Kingmax ones I used to use.<\/p>\n

On plugging it into my Mac, a couple of icons bipped on my dock, then Skype opened. Wat? More importantly, there was no storage to be seen, so once my virus fears had subsided a bit, I was determined to find out what this pointless piece of plastic was doing.<\/p>\n

The stick identified itself to the system as an Apple keyboard (USB ID 05ac:020b), and spits out the following characters (captured by cat and xxd on my Raspberry Pi):<\/p>\n

0000000: 1b72 1b5b 317e 1b5b 3477 7777 2e62 757a\u00c2\u00a0 .r.[1~.[4www.buz\r\n0000010: 7a63 6172 642e 7573 2f73 6365 2d32 3230\u00c2\u00a0 zcard.us\/sce-220\r\n0000020: 0a\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0\u00c2\u00a0 .<\/pre>\n
After reading about evil USB dongles<\/a>, it seems that the Ctrl-R keypress it’s sending is the Windows “Open Browser” command, and then opens the url www.buzzcard.us\/sce-220<\/code>. This link redirects to\u00c2\u00a0www.plugyourbrand.com\/gosolar_sce\/index.html?u=220<\/code>, which appears to do some Flash\/JS stuff which I don’t want to understand.<\/p>\n
The funny thing is, the card has the perfectly respectable www.GoSolarCalifornia.ca.gov<\/a> (well, respectable if you consider a US .gov website as such) link printed on it. Even printing a card with a QR code linking to that address would be less opaque.<\/p>\n
\"\"<\/a>
(This is not a link to goatse, honest.)<\/figcaption><\/figure>\n
As is, a bunch of plastic was wasted in vain just to save people typing an URL. We’re all going to die, and it really is<\/em> your fault …<\/p>\n","protected":false},"excerpt":{"rendered":"
Put me out to pasture, my conference swag skills are failing. I picked this up at Solar Power International: I thought I was picking up a USB memory stick, as I’d nabbed one in the same form factor before. Break off the backing card at the hinge, and you’ve got a nice tiny data store […]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":false,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2}},"categories":[7,16],"tags":[2558,1298,2609,62,2510,2559,229,2560],"class_list":["post-7882","post","type-post","status-publish","format-standard","hentry","category-computers-suck","category-wagdaiyf","tag-exhibition","tag-fail","tag-qrcode","tag-rant","tag-raspberrypi","tag-swag","tag-usb","tag-webkey"],"jetpack_publicize_connections":[],"jetpack_featured_media_url":"","jetpack_shortlink":"https:\/\/wp.me\/sQNZZ-swagfail","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/scruss.com\/blog\/wp-json\/wp\/v2\/posts\/7882","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/scruss.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/scruss.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/scruss.com\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/scruss.com\/blog\/wp-json\/wp\/v2\/comments?post=7882"}],"version-history":[{"count":7,"href":"https:\/\/scruss.com\/blog\/wp-json\/wp\/v2\/posts\/7882\/revisions"}],"predecessor-version":[{"id":7890,"href":"https:\/\/scruss.com\/blog\/wp-json\/wp\/v2\/posts\/7882\/revisions\/7890"}],"wp:attachment":[{"href":"https:\/\/scruss.com\/blog\/wp-json\/wp\/v2\/media?parent=7882"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/scruss.com\/blog\/wp-json\/wp\/v2\/categories?post=7882"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/scruss.com\/blog\/wp-json\/wp\/v2\/tags?post=7882"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}