a kickstarter project, with a more powerful hardware and easy to hack system, would be great
Wouldn't that just be a raspberry pi?
The point is to have small device that would fit in a SD slot and AFAIK the Raspberry Pi can't be reduced that small.
Hacking Transcend WiFi SD Cards
51–58 of 58 posts
Re: Hacking Transcend WiFi SD Cards
#52As pointed out over at http://www.mikrocontroller.net/topic/303547
the most simple way of starting the fun:
Create a file called autorun.sh on the card, put
telnetd -l /bin/sh &
in that file and boom. telnet 192.168.11.254 and enjoy.
Re: Hacking Transcend WiFi SD Cards
#53"Perl has a nice feature when opening a file with the open() library call, because it not only opens files, but runs programs if the file path is not a path, but a shell command ending in a pipe." I thought only PHP did things like that :) I hope this is disabled in mod_perl? Because if not I need to let someone know they need to audit their code. PS. I get how useful this is, and it's well documented, but this funct…
Perl has the three argument open that is safe. The issue is well known by perl developers and well explained in the popular free book "Modern Perl".
And the three argument open has been in Perl since at least 5.6, which was released 13 years ago. No reason to use anything else.
Re: Hacking Transcend WiFi SD Cards
#54Earlier quoted context omitted.
There is a >50 MB "GPL download" on the Transcend website. So I guess they are at least partially complying with it.
Do you have a link? The only GPL-related download I could find was for their RecoveRX data recovery software: http://www.transcend.de/products/RecoveRXTool/GPL.asp
Sorry, here it is: http://www.transcend-info.com/Support/DLCenter/dllogin.asp?L...
Re: Hacking Transcend WiFi SD Cards
#55Earlier quoted context omitted.
According to author's post in the Reddit thread, it has a 400MHz arm9 with 30MB of RAM.
That's actually pretty decent considering what it is. Do you think you could run owncloud or something similar to use it as a sort of wireless flash drive?
or maybe it could be used as a ultra low energy bittorrent client: the cpu should be fair enough (many router/nas use 800mhz-1ghz ARM cpu and they offer bittorrent and other clients) and even though this device is low on memory (32MB RAM) it looks like transmission client can use only 10MB or RAM: http://pastehtml.com/view/5tx16jw.html so MAYBE it could work.
Re: Hacking Transcend WiFi SD Cards
#56My experience with embedded systems allows me to be fairly certain that this bugfest is due to an electronics engineer writing the software for the card. Way too often small R&D teams, especially working on new products, have EE people being assigned to part-time-embedded-programmer roles. This is especially scary as some of these teams work on internet-facing pieces of hardware - home routers/gateways, etc. One cool…
As someone who's written software for all his life, I'll posit that most "software engineers" write code like this. People don't test corner cases; they just shit out code, check that it works in the browser, and ship it. That's why the regexes like /.PNG/ are in there: they work, but they don't prevent the security problems they intend to prevent. If the engineer writing the code had written unit tests that checked…
How can I as a developer be sure my unit tests are complete? How can we develop or improve that ability to think "what could go wrong?"
I don't think they developers of Android, iOS, or the PS3 (and many others) were using insecure coding practices. They still got rooted over and over again.
Re: Hacking Transcend WiFi SD Cards
#57Earlier quoted context omitted.
I really should start blogging - one of my many unfinished projects is a teardown and reverse engineering effort of a Philips BD player. Java isn't even the half of it.
I really do hope you consider writing that blog post. Everyone here, and on several other sites, would love to read the trials and tribulations of hacking something like a BD player. :) Even if its just a quick run down with some pictures and a little story, it would be worth it.
I'd really appreciate some early feedback on the stuff I'm writing, but you don't have any contact details in your profile - send me an email if you want a preview.
Re: Hacking Transcend WiFi SD Cards
#58Thanks for posting. I love articles like this which follow the thought processes of someone trying to hack a device. Keep 'em coming!
I'm working on an article like this (but with less success at the end) for my Blu Ray player. Email me if you want a preview!