Earlier quoted context omitted.
I think the idea is that it could proxy communication. Mitm
you still have to install the proxy certs
Pick your favorite windows 0-day and use it to only install a cert and nothing else that would tip off AV software.
Found hooked up to my router
131–140 of 358 posts
Re: Found hooked up to my router
#132Want to see what's in the initramfs. It almost certainly doesn't have his data on it (it looks to me like it never writes anything to the sdcard, at least not that partition)
Re: Found hooked up to my router
#133You will pay me to give you fake information and a free Raspberry Pi Nano?
Where do I sign up?!
Re: Found hooked up to my router
#134Earlier quoted context omitted.
you still have to install the proxy certs
Pick your favorite windows 0-day and use it to only install a cert and nothing else that would tip off AV software.
Not only that, but because the device has unfettered access to the internet, an attacker can always update it with new ways of installing certificates on your machine.
Re: Found hooked up to my router
#135Earlier quoted context omitted.
Stuxnet is fascinating. Still, as far as I can tell, the most complex, interesting malware ever found in the wild. I believe it's unclear how stuxnet found its way into the enrichment facilities.
It did contain a USB device exploit delivering a dropper with a completely separate payload specifically targeted at the Natanz facility. A compromised USB device picked up in the parking lot would do the trick, but there are certainly other ways to get something through the front door and that information is unlikely to be public knowledge any time soon.
I do remember reading about that. It exploited a bug in windows to load an executable when the usb was plugged in. It then installed a usermode rootkit and hid its files.
Re: Found hooked up to my router
#136I guess this touches on rules 1 & 3 of the Ten immutable laws of security. Maybe rule 4 to an extent as well.
https://blogs.technet.microsoft.com/rhalbheer/2011/06/16/ten...
Re: Found hooked up to my router
#137Earlier quoted context omitted.
It's amazing how many people forget that Raspbian is still Linux under all the Wolfram and Raspberry Pi stuff. So you essentially have a tiny computer that can be plugged into almost anything you can program for.
Nobody using a raspberry pi forgets that.
If they picked it out and bought it, yes, obviously.
However, there are a lot of products sold that perform selected tasks that run on preconfigured raspis with the consumer none the wiser. Kodi boxes, emulation kits, scientific plug-and-go kits, and much more.
I have been offered or asked about things running on raspi hardware on many occasions by people who were none the wiser to what platform they were using, and we recently had an event where we gave out around a hundred of them preloaded with run-once synchronized software for an event. How many of those people knew for certain they were holding Raspberry Pi Zero W boards with pared down Linux kernels? None.
They're a lot more commercial and common than a handful of snarks with downvotes realize, and OP doesn't deserve to be punished for that.
Re: Found hooked up to my router
#138> I have a Raspberry Pi right now in my hands fron rentyouraccont.com, i have it running diagnostics on an Air-Gapped pc. This thing is wild. Every second it tries to connect to bot-net programs. It not only buys ads on facebook (which btw i cannot find code that it actually does this) but it is creating links to malware ridden embeds. It is part of a Botnet, i can say for sure. Every second it tries to establish a c…
How is that even possible? How does it capture keystrokes (unless you mean Google searches where each key is sent for autocomplete). How does it break SSL?
Re: Found hooked up to my router
#139Whilst it's certainly a scam to do with advertising [0], I doesn't look like there's any evidence that the scam has anything to do with 'stealing' anything from network / network traffic: > Facebook has several mechanisms in place to protect your account. We make every attempt to work within the these constraints. In order to keep your account from being locked we use a small device called a Raspberry Pi. This device…
I find these claims extremely dubious. Everything they claim the Pi is needed for can be accomplished without the equipment and postage costs with a purely software solution; The hardware allows them to monitor all traffic and avoid antivirus/firewalls. Moreover, I doubt it is difficult to find mass-market Facebook accounts for much less than $15/month - it is far more likely that, given the hardware allows them unfe…
In this case, having a distributed botnet of Pis at people's houses would make sure you didn't get IP blocked by Facebook, since there are also legitimate users at that IP. Facebook probably would not block it, and even if it did unplugging and plugging back in the modem is enough for most residential gateways to get a new external IP.
Re: Found hooked up to my router
#140I don't see how this 'man' in the middle could actually intercept passwords, except for http, but who runs auth over http anyway. For https, the 'man' would have to substitute its own certificate and then the browser / client software wouldn't trust the cert/domain combination without the end user being extremely stupid (and knowledgeable enough to achieve the stupidity).
You type in http://yourbank.com, your bank respomds with a 301 to https, but this helpful router instead takes you to its phishing site. Lots of people wouldn't notice.