Any mirrors not in Russia? My ISP blocks access.
Out of interest, which country are you in? Is this something your country's government made your ISP do?
It's starting to look like an increasingly sensible policy IMO.
Remote code execution via MIDI messages
31–40 of 86 posts
Re: Remote code execution via MIDI messages
#32interesting.
Re: Remote code execution via MIDI messages
#33Earlier quoted context omitted.
Out of interest, which country are you in? Is this something your country's government made your ISP do?
It's starting to look like an increasingly sensible policy IMO.
For an ISP? Absolutely not. I get it for corporate firewalls, but I absolutely don't want my ISP blocking a country. It does absolutely nothing for security (domains aren't hard to buy) and I'm very happy with my ISP being a "dumb pipe". If I wanted more than that I'd use my firewall or something
Re: Remote code execution via MIDI messages
#34While I suggest reading the whole thing, the money-quotes: > So yeah, these [keyboard manufacturer] madlads made a shell that runs on top of MIDI SysEx messages on top of USB. > [T]he most interesting commands that we have are arbitrary memory read/write commands. So, if we really wanted to, we could just peek and poke the memory of the synth via MIDI. > If we wanted to, we could write these messages to a MIDI file a…
P.S.: Now the real question is whether you can change the running-code on the keyboard so that it tries to infect other keyboards (of the same model) that might receive MIDI data originating from-it.
In a way, this is a peek at the nightmare of Internet of Things (IoT, where the S stands for Security.) Almost any device might have a backdoor in it, and it might even be a stupid backdoor, like #0000.
Re: Remote code execution via MIDI messages
#35Great project, write-up, and sense of humor in the videos! > Using that part number I wasn’t able to find any information about the chip online apart from an article that claimed it was based around a “SuperH” CPU core – an ISA that I’ve encountered for the first time ever in that article. Also found in Sega 32x, Sega Saturn, and Sega Dreamcast! And some early Pocket PCs (turn-of-the-century handhelds running Windows…
Many industrial applications as well. Mitsubishi used it in the ECU of some of its cars, including the Lancer Evolution.
Re: Remote code execution via MIDI messages
#36> Now, we have to get a little philosophical here. In my eyes, RE is like a game of minesweeper. You start with an empty field not knowing the state of any of the cells, i.e. not knowing whether each individual cell contains a landmine or not. When you discover the state of a cell, you have the context to deduce the state of its neighbor cells. In minesweeper, you don’t have a particular direction in which you progre…
The one difference is in re you sometimes go up no matter what because there isn't enough information. (in minesweeper I typically pick a few squares early because without them the game probably won't be solveable anyway. Typically in thegame once you have enough solved you have it all - once in a while a couple squares are unknowable. In re you hit points where you know all the clues can get you more often and so have to try something at random. Otoh it is much rarer in re for a wrong try to be catestropic [not unheard of but rare]
Re: Remote code execution via MIDI messages
#37As someone who's reversed some basic MIDI stuff in an old video game and has always wanted to get into hardware hacking, I really enjoyed reading this article. Great work!
Re: Remote code execution via MIDI messages
#38How does a man even get to this point?
I will tell you how: derangement, a failure to engage with society and the degeneration/depravity of being one step away from making MIDI component improvised explosives and emailing your remaining friends a manifesto.
Ah just kidding, this is pretty sweet.
Re: Remote code execution via MIDI messages
#39> I’m very unexperienced when it comes to reverse engineering Lol… where does that leave the rest of us in comparison
Yeah this is oft-repeated by particularly good "lay" engineers.
Re: Remote code execution via MIDI messages
#40So, the repo's README claims the repo contains the image dumps, but they're not actually there. Is this correct?
My bad! I added *.bin to .gitignore last minute to exclude assembled code snippets, but looks like the dumps were excluded as well. I'm going to upload them in the next few hours