164
people found this helpful, as of 2023
ranked #203,248 most helpful
out of 571,544,897 reviews
★☆☆☆☆
If you really care about your job, don't use this
So out of a whim I bought this device, figuring its more thank likely upper management is monitoring my activity. I figure, what could a seemingly harmless HID emulator do besides jiggle my mouse.
Package arrived, very generic package, the same as any cheap electronics device on amazon, no tamper seal or shrink wrap. With the device in hand, I took a pause before plugging it into any of my devices and thought What the heck am I doing here.
1) I have not idea what actual code is running on this thing
2) I have no real way to ascertain the manufacturer or true origin.
3) Assuming the manufacturer operates in good faith, with Amazon's return policy and handling, means this could have been "purchased" and returned by a bad actor with modifications
4) With the current state of infosec, this thing can wreak havoc the minute its plugged in. Even if your corporate issued laptop is locked down, there is several ways this thing can exploit it.
So I cant use this thing without assuming a lot of risk, risk of an event that is much worse than having my manager rag me about being away on teams too much.
So only solutions that are viable
1) Get an old school mouse jiggler that uses your mouse and just flashes the optical sensor and only requires power.
2) If you are savvy, program an arduino device to act as an HID with some code that you can actually inspect.
October 2021 · Electronics · verified purchase