21–30 of 41 posts
Sentences like that make me happy. I love the hacker spirit.
I have the pleasure of having been involved with one of the first network protocol reverse-engineers of the LIFX [0], and off the back of that hacked together a NodeJS library and a Wireshark dissector. I've updated the NodeJS lib to handle the new firmware (it does more over UDP, whereas it used to use a mixture of UDP and TCP) but not the dissector yet. There's absolutely no authentication on the network protocol a…
The TI CC2538 should be safe against attacks in which the flash could be obtained even after a chip erase like in older modules [1].
[1] TI CC2430 Attack http://www.blackhat.com/presentations/bh-usa-09/GOODSPEED/BH...
I just bought 3 Miilight bulbs, and obviously after installing them I was like. Man my neighbours could probably control my lights... I also have a RF remote which operates on 2,4ghz and does not require network authentication. The Wifi bridge does require authentication however. I was thinking of building an RF "cannon" with a directional antenna and see how far I can go. I also got a DVB-T dongle. I should be able…
CRASH AND BURN
The LIFX guys should asap enable the lock bits on the micro conrollers. Reading out the firmware from a product is a no-go. The TI CC2538 should be safe against attacks in which the flash could be obtained even after a chip erase like in older modules [1]. [1] TI CC2430 Attack http://www.blackhat.com/presentations/bh-usa-09/GOODSPEED/BH...
The LIFX guys should asap enable the lock bits on the micro conrollers. Reading out the firmware from a product is a no-go. The TI CC2538 should be safe against attacks in which the flash could be obtained even after a chip erase like in older modules [1]. [1] TI CC2430 Attack http://www.blackhat.com/presentations/bh-usa-09/GOODSPEED/BH...
They're distributing the firmware on-line (for updates) -- why prevent reading the firmware from the chip itself?
I have the pleasure of having been involved with one of the first network protocol reverse-engineers of the LIFX [0], and off the back of that hacked together a NodeJS library and a Wireshark dissector. I've updated the NodeJS lib to handle the new firmware (it does more over UDP, whereas it used to use a mixture of UDP and TCP) but not the dissector yet. There's absolutely no authentication on the network protocol a…
Disclaimer: I work on AllJoyn.
https://git.allseenalliance.org/cgit/lighting/service_framew... https://allseenalliance.org
> Due to the technical challenges involved, specialist equipment required and general perception that it would be the hardest, we decided to begin our search for vulnerabilities in the intra-bulb 802.15.4 6LoWPAN wireless mesh network. Sentences like that make me happy. I love the hacker spirit.
Earlier quoted context omitted.
Not really, unless your early 90s PC was really shit.
Yes really. The 50 to 100 MHz 486 processor was the state of the art consumer computing platform of the early 90s. The bulb in question here has not just one, but two processors that both run faster than the 100MHz 486. Also, when Windows 95 came out - in 1996 - the minimum required RAM was 4MB. The ST processor in the light bulb has built in RAM of 1MB. So, in theory, it would be possible with a few hacks to get the…
"few"