A mobile security training scenario describes a user at an airport connecting their phone to a public USB charging station. The phone displays a 'Trust this Computer?' dialog. The user taps 'Trust.' What has the user consented to?
- A.A. Only charging over USB; the trust dialog does not affect data access
- B.C. Only file transfer access using MTP; ADB and backup access require separate developer options
- C.B. Full USB data access from the connected computer/charging station to the phone, including the ability to install apps (ADB access), access the file system, and potentially backup device data
- D.D. Trust that applies only to photos and videos accessible via PTP protocol
Why C is correct
The 'Trust this Computer?' dialog on iOS (and similar Android USB authorization) grants the connected computer full USB data access capabilities. On Android, this includes ADB access (which can install apps, pull files, and execute commands). On iOS, trusting a computer allows iTunes/Finder to backup, sync, and access the device. Tapping 'Trust' at a malicious charging station grants the attacker's equipment broad access. The dialog is not limited to charging (that requires no trust), MTP file access, or photos only.
Know someone studying for Mobile Security Fundamentals? Send them this one.