this post was submitted on 10 Feb 2024
743 points (99.1% liked)

Technology

59132 readers
3268 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related content.
  3. Be excellent to each another!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, to ask if your bot can be added please contact us.
  9. Check for duplicates before posting, duplicates may be removed

Approved Bots


founded 1 year ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
[–] [email protected] 16 points 9 months ago (1 children)

I understand and appreciate the point of the childish look of the f-zero, but I often find myself wishing it was in more of a phone or phone case form factor.

Why? No one questions a phone in your hand. You can be literally anywhere, including places that disallow phone usage, and no one is going to bat an eye. But a f-zero raises questions. I can’t tell you have many times I’ve been asked “what is that thing?”

And now, it’s reached a level of popularity that people will recognize it for what it is. It’s not generic looking, in fact quite the opposite. Whereas a long, wide, thin black box looks like every other phone out there.

[–] [email protected] 13 points 9 months ago (4 children)

So what are you doing with it that makes you prefer not to be noticed?

[–] [email protected] 14 points 9 months ago (1 children)

I’ve used it in multiple places that I don’t like the questions. Hospitals when the tv remote has been “misplaced” (aka staff doesn’t give a fuck and someone stole it,) bars (with permission,) entry into hotel rooms, at my work because I forgot my badge.

And as mentioned, pen testing. Though not professionally and just at the office (with permission) to see how far it could get (surprisingly far actually, with the right badge.)

The thing about it is though, it stands out to an extreme. Even if I have it out on a table while sitting down (it’s rather bulky for a pocket) people take notice and ask what it is. “It’s like a universal remote” just raises more questions.

[–] [email protected] 2 points 9 months ago (1 children)

Could you unscrew the plastic case and 3d print something in black?

[–] [email protected] 1 points 9 months ago

I’d not thought of that actually. I only have a resin printer though, which raises questions on fragility. But I’ll have to give that a shot.

[–] [email protected] 10 points 9 months ago (1 children)

Besides the obvious nefarious purposes, a pen test is something legit I can think of that would be useful for.

[–] [email protected] 0 points 9 months ago (1 children)

Why do you need the device to be unnoticeable for that?

[–] [email protected] 15 points 9 months ago (2 children)

You can’t see how being less detectable might be in your favor for a pen test?

[–] [email protected] 0 points 9 months ago (2 children)

It's not spy work, it's testing a system.

[–] [email protected] 2 points 9 months ago

Part of modern pen testing absolutely involves a bit of social engineering to test policy enforcement

[–] [email protected] 1 points 9 months ago

There can be a physical component to it though I’m not too sure about how prevalent it is. Which would be aided by blending in.

[–] [email protected] -2 points 9 months ago (1 children)

Is pen testing a visual test now?

How does the physical appearance of the device affect its electronic penetration?

[–] [email protected] 7 points 9 months ago (1 children)

Yes? Pen testing is often “I am hiring you to see how far you can get into the company infrastructure under these constraints.” This includes human interaction, and humans can be a barrier to a pen test.

Part of that is going to be looking as innocuous as possible. Though admittedly that isn’t always the case. This kinda gets blown away when someone goes “oh look, that’s a flipper zero, aren’t those used for hacking?”

[–] [email protected] 1 points 9 months ago (1 children)

Interesting. It sounded kind of ridiculous to me, I guess I didn't consider gaining access to a building or something.

[–] [email protected] 1 points 9 months ago

Ah okay, I see the confusion. A lot of people think pen testing is just “try to break into our app” or “try to get into our network” but those are usually narrow scope pen testing.

If you truly want to test your security, you can never rule out physical access. You could have the most secure network in the world and it would mean nothing if you kept it in an unlocked room in a publicly accessible area.

And you’d be surprised by the number of times pen testers gain access to those rooms because of human mistakes.

[–] [email protected] 4 points 9 months ago

Some people just prefer to care for their little digital dolphin in peace.

[–] [email protected] 1 points 9 months ago

Maybe read the article before presuming anyone using a flipper is a criminal. Like damn yo.