41–46 of 46 posts
Earlier quoted context omitted.
This is exactly why I dismantle and inspect all 'unimaginably cheap' pieces of tech before using them for their intended purpose. That, and curiosity. There are many clever cost-cutting hacks to be learned that way.
One of my favourite youtube channels is BigClivedotcom's, where he takes apart a bunch of cheap gadgets. https://www.youtube.com/user/bigclivedotcom
Earlier quoted context omitted.
It's currently £5 inc. delivery on Amazon.co.uk. This puts it into Raspberry Pi Zero and NodeMCU/ESP8266 territory. Add to the fact that internally it's not very different to the venerable TP-Link WR-703N and it's possibly a great OpenWRT device to tinker with. I've used Gearbest in the past. They're ok to order from generally, but their unsubscribe mailing list email link doesn't work and I had trouble ordering from…
Except the pi zero has a 1ghz quad core processor and 512mb ram. This has 64mb and a terrible 400mhz single core processor (i think). So not really that comparable. Also not forgetting that without modifying the chip it gives the Chinese company that makes it complete access to any files that go near it if it gets internet access.
Earlier quoted context omitted.
Interesting. IS it wrong that my first thought was that they look benign and unobtrusive enough that they could be easily socially engineered into somewhere to start scanning for vulnerabilities... ? When flashed with the appropriate firmware of course.
People used to use Sheevaplugs for this, e.g. https://www.pwnieexpress.com/product/pwn-plug-elite/
That pwn-plug has had some serious mods done to it, with bluetooth, 4G and 802.11 wireless built in! (--edit-- I see now that those are provided by adaptors, not built in to the box, that does reduce its stealthiness somewhat)
These new ones are much smaller than that by the looks of things though, seemingly on the scale of socket adaptors, rather than (to an up to date eye) quite a big power brick.
Thanks for the link, that was interesting.
Earlier quoted context omitted.
Except the pi zero has a 1ghz quad core processor and 512mb ram. This has 64mb and a terrible 400mhz single core processor (i think). So not really that comparable. Also not forgetting that without modifying the chip it gives the Chinese company that makes it complete access to any files that go near it if it gets internet access.
pi zero has 700mhz single core, same as raspberry A/B/B+. Also, zsun has built in WiFi
Earlier quoted context omitted.
https://xkcd.com/1494/ Seemed relevant.
LOL. Not sure it's 100% applicable, but certainly my proposal would indeed by illegal black-hattery, unless done by a legit pen-tester. I'd never do such a thing, but I might now be more aware that the little plastic block attached to the socket over there could easily be a cheap, full linux system running some sort of metasploit/neopwn variant...
Earlier quoted context omitted.
Just a heads up, the device you mention uses an RT5350-based SOC. There's nothing wrong with it, but support can sometimes be a little flaky. However, the built-in wifi chipset doesn't do channel hopping properly while the AR9331 does, meaning that for people doing 802.11 security stuff this is not the chipset for you. If on the other hand you're not doing 802.11 or anything funky with the hardware, it's a nice littl…
> I have one using a CDC ether USB gadget to inject rickrolls into web pages. Interesting. Did you do much hardware-wise for that - like rewire USB D+/D- signals and add/remove some obscure resistor that enables USB gadget mode?
EDIT: Actually there are quite a few boxes out there that do have CDC support built in. The ASUS WL-330NUL uses a stripped down ASUSWRT and has CDC support built-in. You can get the firmware source and build your own version if you like. It's not as friendly as OpenWRT (which is saying something) but is workable if you persevere.