Archive for the ‘Hacking’ Category

Winner of Name that Ware January 2007!

Wednesday, February 28th, 2007

The winner of last month’s name that ware is Karl, who nailed it in the first post, and very helpfully followed up with the plaintext of his md5sum’d answers, which made judging a lot easier. Congrats, and email me to get your prize!

Last month’s ware was indeed my digital tachometer for my old ’92 Toyota Corolla. The lead-acid battery pack was used during testing before I opened a hole in the console to tap power for the device. Does it look improvised? Yes. Sinister? No. Is it a bomb? No.

That thing was a lot of fun. A firware revision on the tach actually plotted along the bottom a time-history graph of the engine RPM, so you could see how quickly and efficiently you were shifting. The police officers also found it pretty interesting as well. I would get pulled over sometimes just because the officer was curious, and then he’d give it a chuckle and send me on my way because he knew I was “one of those MIT guys”. I had been thinking about putting one of these in my current car, but I just haven’t had the time to get under the hood and hack it (and I suppose now I run the risk of being pegged as a terrorist and whisked off to Guantanamo Bay). I think if I were to make one again, I would still use a VFD. There’s just something timeless about a Vacuum Fluorescent Display. Fortunately, it looks like Noritake still makes them. Actually, now that ODB-II is prevalent, I probably don’t even have to get under the hood anymore. Bonneville, here I come!…oh wait, I have to ship chumbys first…

Hypervisor Privilege Escalation Vulnerability

Tuesday, February 27th, 2007

Some readers might be interested in this SecurityFocus BugTraq disclosing a vulnerability in the Xbox360 Hypervisor, enabling the execution of arbitrary code. It’s quite an interesting read and it’s an elegantly executed hack. It is also a great example of how difficult it is to build a secure system, even with powerful techniques in place such as a Hypervisor and hardware encrypted/hashed RAM. To wit, this vulnerability does not lessen the noteworthy accomplishment of the Xbox360 security architects; they tackled a very difficult problem and executed their solution almost flawlessly.

Thanks to the little birdies outside my window who told me about this link. :-)

C64 vs. Xbox360

Friday, February 9th, 2007

Nate Lawson (co-designer of the Blu-Ray content protection layer) had a nice presentation at RSA2007 comparing the content protection schemes used on the Commodore64 vs. the Xbox360. His slides are an interesting and fun read…kind of brings out a certain nostalgia, but then you realize that things aren’t all that different today.

Seeing Through Circuit Boards

Wednesday, February 7th, 2007

I’m resolving some manufacturing challenges in the new chumby design and had the opportunity to use an X-ray board inspection tool. This tool is what you want to use if, for example, you wanted to reverse engineer a circuit board with buried or hidden traces. It also lets you see through the packages and inspect the quality of the wirebonds. This particular system has a feature that let you rotate the board as you inspected it so you can look at it at an angle–which is actually really cool to see live, it’s sort of like flying through the circuit board. I wish I had a video of it but I didn’t bring my camera into the shop today.

Anyways, I thought those who have never seen this capability before would find the following pictures interesting and perhaps thought provoking.

Nothing hides from the X-ray eye!

A Little Something for the Hackers in Boston

Thursday, February 1st, 2007

I spent 10 good years in Boston while I attended MIT, and I carried around plenty of devices that could be classified as “suspicious looking” by Coakley’s standards, such as the “nerd kits” that we used to build our electronics labs.

So, for the hackers, students, and artists in Boston, here’s a little something for you. Give the Boston authorities a clue, because it seems like they need one:

These stickers are now prizes that you can choose if you win Name That Ware. If you are interested in getting one for yourself and not playing the game, you can buy these stickers by clicking on the respective images above [cafepress.com]. Let’s hope no terrorists buys one of these and sticks them on a real bomb, and hide them in plain sight–complete with blinking lights, loose wires, batteries, and the bird!

Only you can cure the American Autoimmune Disease!