Live data from Hacker News

Hacking the Zsun WiFi SD Card Reader

wiki.hackerspace.pl

31–40 of 46 posts

Re: Hacking the Zsun WiFi SD Card Reader

#31
post #20

Earlier quoted context omitted.

LOL. Not sure it's 100% applicable, but certainly my proposal would indeed by illegal black-hattery, unless done by a legit pen-tester. I'd never do such a thing, but I might now be more aware that the little plastic block attached to the socket over there could easily be a cheap, full linux system running some sort of metasploit/neopwn variant...

We are now beyond assuming that you can "see" the tiny computer over there. You can pretty assume that for example that any electrical device could have one of these concealed in it. That includes electric cords and light bulbs. Additionally these can be hidden in non-electrical objects with small batteries and run for weeks.

Well this is true, I guess it just struck me that this is a convenient and easily overlooked form-factor, and pretty dirt cheap.

Re: Hacking the Zsun WiFi SD Card Reader

#32
post #20

Earlier quoted context omitted.

LOL. Not sure it's 100% applicable, but certainly my proposal would indeed by illegal black-hattery, unless done by a legit pen-tester. I'd never do such a thing, but I might now be more aware that the little plastic block attached to the socket over there could easily be a cheap, full linux system running some sort of metasploit/neopwn variant...

We are now beyond assuming that you can "see" the tiny computer over there. You can pretty assume that for example that any electrical device could have one of these concealed in it. That includes electric cords and light bulbs. Additionally these can be hidden in non-electrical objects with small batteries and run for weeks.

This is exactly why I dismantle and inspect all 'unimaginably cheap' pieces of tech before using them for their intended purpose. That, and curiosity. There are many clever cost-cutting hacks to be learned that way.

Re: Hacking the Zsun WiFi SD Card Reader

#34

Can you run other general Linux tasks on a DDWRT build?

This is OpenWRT, not the same thing as DD-WRT. It's basically a full embedded Linux distro with extra emphasis on networking and complete with its own package manager, so the answer is yes you can do quite a lot with it.

It's possible to do more general purpose stuff with DD-WRT as well, but it's not quite as flexible . IIRC you can install your own packages there too, but it is set up to be more streamlined as a SOHO router.

Re: Hacking the Zsun WiFi SD Card Reader

#35
post #32

Earlier quoted context omitted.

We are now beyond assuming that you can "see" the tiny computer over there. You can pretty assume that for example that any electrical device could have one of these concealed in it. That includes electric cords and light bulbs. Additionally these can be hidden in non-electrical objects with small batteries and run for weeks.

This is exactly why I dismantle and inspect all 'unimaginably cheap' pieces of tech before using them for their intended purpose. That, and curiosity. There are many clever cost-cutting hacks to be learned that way.

One of my favourite youtube channels is BigClivedotcom's, where he takes apart a bunch of cheap gadgets.

https://www.youtube.com/user/bigclivedotcom

Re: Hacking the Zsun WiFi SD Card Reader

#36
post #7

There are also a lot of 'smart wifi plugs' which use the same chipset (although with less RAM), which can be bought for ~$20: http://www.anites.com/2015/01/hacking-kankun-smart-wifi-plug...

Interesting. IS it wrong that my first thought was that they look benign and unobtrusive enough that they could be easily socially engineered into somewhere to start scanning for vulnerabilities... ? When flashed with the appropriate firmware of course.

People used to use Sheevaplugs for this, e.g. https://www.pwnieexpress.com/product/pwn-plug-elite/

Re: Hacking the Zsun WiFi SD Card Reader

#37
post #2

Wow it's only a $9 device (see below) Definitely trying this out. I wonder what the power draw is? Shame they didn't use microusb connector. No idea about the trustworthiness of this seller but use the page for general info and lots of photos: http://www.gearbest.com/memory-cards/pp_246125.html update: only $9.13 with coupon code GBJANRT and use paypal checkout for safety There is also a source on aliexpress that is…

Given that it can apparently act as a USB card reader if plugged into a bog standard PC, i suspect no more than your typical USB device. So something like 0.5A at 5V.

And why would you want microUSB?

Re: Hacking the Zsun WiFi SD Card Reader

#38
post #2

Wow it's only a $9 device (see below) Definitely trying this out. I wonder what the power draw is? Shame they didn't use microusb connector. No idea about the trustworthiness of this seller but use the page for general info and lots of photos: http://www.gearbest.com/memory-cards/pp_246125.html update: only $9.13 with coupon code GBJANRT and use paypal checkout for safety There is also a source on aliexpress that is…

Given that it can apparently act as a USB card reader if plugged into a bog standard PC, i suspect no more than your typical USB device. So something like 0.5A at 5V. And why would you want microUSB?

microUSB, so that he can use a standard OTG adapter for host mode... (which the SoC supports)

Re: Hacking the Zsun WiFi SD Card Reader

#39
post #38

Earlier quoted context omitted.

Given that it can apparently act as a USB card reader if plugged into a bog standard PC, i suspect no more than your typical USB device. So something like 0.5A at 5V. And why would you want microUSB?

microUSB, so that he can use a standard OTG adapter for host mode... (which the SoC supports)

Ah, i was not thinking in terms of having a micro socket on the dongle. Silly me.
Post reply on HN