An X account claims that a cheap, unbranded power bank bought at an airport contained a concealed computer that presented itself to an iPhone as a trusted device. After the user accepted an “Trust This Computer?” prompt, it allegedly copied device identifiers, contacts, app information, and photos, including images from the user’s wife’s phone. The account further says the power bank obtained the home Wi-Fi password, uploaded the stolen files repeatedly, and was discovered when Claude Code flagged unexpected data activity. The user says they disconnected it, blocked a destination address, changed the household Wi-Fi password and banking credentials, and had a repair shop inspect the device.
Follow-up posts reportedly claim the power bank contained a small computer and Wi-Fi hardware, far less battery capacity than its label advertised, foam, and metal weights. The account also offers a Claude Code prompt for checking power banks. However, the supplied context flags the story as likely staged or unverified: Claude Code on iPhone is a remote client and cannot perform the USB monitoring or data extraction described. The scenario raises a genuine general precaution - do not grant trust to an unknown device merely because it is charging - but the specific theft, technical explanation, and proposed test are not established by the material provided.
Summary generated by AI from the linked article. hn.today is not affiliated with Hacker News or Y Combinator.
A URL-encoding flaw in Hugging Face Chat let unauthenticated requests bypass an admin check and trigger bulk exports of users’ private conversations. The exported data was sent to a configured dataset destination rather than returned directly to the requester. (twitter.com)
Claude Code’s “Don’t Ask Again” setting was linked to passwords and other secrets being exposed in 1,122 public GitHub files. The finding highlights how coding-agent features can accidentally put sensitive data into public code repositories. (apiiro.com)
Hackers stole $133 million from a French bank by targeting a service provider. The available details do not explain how the attack was carried out. (bleepingcomputer.com)
U.S. intelligence reportedly believes Nvidia CEO Jensen Huang had a romantic relationship with suspected Chinese spy Alice Huang, who allegedly sought access to restricted AI chips. Alice Huang is linked to Megaspeed, whose subsidiary faces allegations of smuggling $2 billion in AI chips into China. (tomshardware.com)
A report alleges China is linked to at least 18 overseas police stations in Canada, including three in the Greater Toronto Area. The RCMP is investigating reports of criminal activity connected to the stations. (ctvnews.ca)
Colframe is a low-interaction honeypot that imitates supermarket refrigeration controllers from Danfoss and Dixell. It is designed to attract and observe activity targeting these systems, including Modbus-based threats. (github.com)
Today's best Hacker News stories, summarized and screenshotted, one email a day.