Archive for the ‘Hacking’ Category

Name that Ware May 2007!

Monday, June 11th, 2007

The wares for this month are shown below. Click the image for a larger version.

Ware One

Ware Two

There are two wares this month (and again, I’m late and I apologize–I should be able to get back on schedule next month). I’m hoping they are particularly challenging to guess, because the first person who can correctly guess both wares gets a special prize — a chumby. The first person to get just one of the wares correct will get the usual prize for name that ware ($10 gift card to amazon.com or any piece of bunniestudios schwag you want). You need to identify not only the function of the ware but the item in which it is embedded. As a note, ware two’s wires extend onward to form a spiral loop, they are not shown since the full extent of the wires were outside the range of the x-ray mosaic.

As a reminder, if you are posting an answer, you may want to use the md5sum trick to claim your entry time (e.g., echo “your answer” | md5sum and post that to the comments for your initial guess) without giving away your answer (so that others can’t crib off of your thoughts). Don’t forget to return at the end of the month to fully describe your answer in plaintext, or else I can’t judge your entry! The descriptions will be important because I suspect one of the wares will be particularly difficult to guess, and I’d like to judge this contest carefully because the prize is relatively large.

Here’s an example of the md5sum trick in case you aren’t familiar with it:

$ echo "your answer" | md5sum
21bfb9699d16738785ddcb8dfb472e2c *-

You would then just post 21bfb9699d16738785ddcb8dfb472e2c to the comment round. If you don’t have md5sum, then either get linux, or install cygwin ;-)

Winner of Name that Ware, April 2007!

Sunday, June 10th, 2007

The winner of Name that Ware April 2007 is Bruce Walker. Great work! email me to claim your prize. Seems like this one was a breeze. This ware is similar to one previously featured on Name that Ware; perhaps one could argue that this is its big brother. I actually paid about 400 quai (USD 52) for it, but that’s probably because my haggling skills aren’t that great. Then again, most vendors wouldn’t even talk to me with an opening offer below 400.

I thought this ware was particularly interesting because of the functionality it offered at its price point. For around 50 US, you get a digital camera/video recorder with flash, video playback, FM radio, sound recorder, and best of all–an NES emulator built in.

Important Clarifications

Wednesday, May 16th, 2007

There are some important misconceptions that need to be corrected.

1. I did no technical work on the Xbox 360 hack. Felix Domke (tmbinc) is the true technical genius behind the hack — please give him proper credit for his hard work. My role in this is entirely diplomatic; I was consulted because my previous work on the Xbox meant I was already familiar with the legal risks and the best contact methods. And, as with any hack, there were many other unsung heros involved who are forced to choose anonymity due to risks and circumstances out of their control.

2. No money was involved. The hack was reported to Microsoft per legal requirements, and per security industry standard operating practice. It is no coincidence that this is the exact same path that was taken on the first Xbox hacks (Hypertransport, 007 and Dashboard). The difference is that this time, Microsoft took the time to listen, and eventually invited us to their house to give a talk.

3. Finally, this was the opportunity to tell Microsoft that locking out low-level code development (and consequently Linux) will never work. It’s neither sound technically nor good for business development in the long term. We believe they have listened. Although this approach has never been tried before, based on their reactions, future Microsoft devices may not lock out homebrew; at least, we have planted the seeds of a feasible technical and business path to such a future in key minds at Microsoft.

In closing, I don’t think Microsoft is right in locking down hardware to outside developers; I also don’t think that the pirates are right, either. As a result, I must walk a fine gray line, and I am continuously faced with many a difficult and ambiguous decision.

And, to quote Felix, who posted in the comment round on a previous blog entry:

“The reason to stay anonymous so long was…about not getting sued. But after Bluehat, it become clear that this was no issue anymore.

And my strict demand for working on a project like free60 is that i can publish stuff in public, under my real name, without hiding anything, and still be able to sleep well at night. This would not have been possible if we hadn’t worked together with Microsoft.”

The X-ray Eye — Now in Full Motion

Monday, May 14th, 2007

I love looking at PCBs using x-rays. Great for failure analysis. One of the coolest things, I thought, was seeing a PCB tilt in real-time; you get a good sense of the actual spacial relationship between all the layers on a PCB. I took a series of stills today and strung them together into this animation so I could share the experience with you (you’ll need an embedded Flashplayer plug-in to view this movie):

Thanks to concisys (a San Diego-based contract manufacturer) for letting me use their tool to take these images!

Bluehat07 @ Microsoft

Friday, May 11th, 2007

SEND HELP I”M AT MICROSOFT AND HELD HOSTAGE BY BLUESNIPER!!!!

Okay, so the picture is for real but the caption isn’t. (RSnake has a much better version of the photo here). I am at Microsoft, but the guy on the left isn’t a Microsoft lawyer. He’s John Hering, a founder of Flexilis, inventor of the BlueSniper device for long-range Bluetooth hacking attacks, and all around brilliant guy. John was also a presenter at this years’ Bluehat and he was told to look menacing for a photo…but he just looks so friendly it wasn’t believable. So, I figured I’d add myself to the photo in the executionee pose to give it a little extra flavor.

The picture is actually somewhat apropos because I’ve always believed that Bluetooth will be the death of me (and incidentally, one of the less flattering phonetic translations for chumby in Chinese literally means “execution by gun through the back of the head”. We didn’t use that one.). I’ve been through one frustrating startup designing Bluetooth/802.11b coexistence solutions and now I have this nasty allergic reaction to all things Bluetooth. I have an eye-rolling rant about how there is an eight-inch thick spec and million-transistor radio solutions whose primary application — point to point two-way wireless audio — was solved back in the 60’s with the three-transistor walkie-talkie (OK fine it’s just simplex but you get the idea). With a few thousand very nice CMOS transistors today you could build an extremely low power, low cost single-chip solution that would be so low power it would run for months and so cheap it would be disposable. Talk about a business–disposable fashion headsets that “just worked”–no association headaches, robust performance, etc. Anyways, I could go on for a while about my frustrations with this IrDA of the 00’s but I’ll save you the rant (unless you really want to hear it…)

I was at Bluehat giving a presentation with Felix Domke on various hardware hacking exploits, including silicon hacks, dbox-2, Gamecube, and of course, the Xbox360 (Felix is a genius and a gentleman). Below is a photo of Dinart Morais (whose initials ironically are “drm”), the designer of the Xbox360 security, and Michael Steil, Felix Domke, and me.

It was quite an honor to meet the man who designed such an excellent security system. We had a lot of questions for him, and he was very friendly. I guess since we have given our talk now, there is no more secret about it, some of the folks in the picture above were part of the team that published the February 2007 Xbox360 Hypervisor Priviledge Escalation Vulnerability. Fortunately, Microsoft was very receptive to working with us to fix the vulnerability before it was published and in the end it was a constructive exercise for all parties involved.

omg wtf I’m at Microsoft talking about Xbox hacking??!?!?

Please see Important Clarifications as well. Felix Domke (tmbinc) is the genius behind the Xbox360 hack. Please credit him properly!