🌘 我的音訊介面竟然預設開啟了 SSH
➤ 探索硬體更新機制意外發現的安全後門
https://hhh.hn/rodecaster-duo-fw/
本文記錄了作者對 Rodecaster Duo 音訊介面的逆向工程過程。起初,作者僅是出於好奇,想捕捉並研究該設備的韌體更新機制。透過 macOS 的磁碟活動監控,作者發現韌體更新檔為簡單的 gzip 壓縮包,且該設備不僅缺乏韌體簽章檢查機制,甚至預設開啟了 SSH 存取功能,並內建了公開金鑰。作者進一步使用 Wireshark 擷取並分析 HID 控制訊號,成功解析出更新流程,最終透過自製腳本與客製化韌體,達成了對該設備的完全掌控。儘管作者已向原廠回報此資安疑慮,但至今未獲回應。
+ 這實在太瘋狂了!一臺專業音訊設備竟然沒有韌體簽章校驗,這意味著隨便誰都能寫入惡意韌體,這種安全水準簡直是災難。
+ 作者的分析手法非常俐落,利用 Wireshark 解析 HID 指令是關鍵。不過,SSH 預設開啟且內建金鑰,這到底是開發者的疏忽還是為了維修預留的後門呢?
#資安研究 #韌體逆向工程 #Rodecaster Duo
My audio interface has ssh enabled by default

I bought a Rodecaster Duo to solve some audio woes, and found that it has ssh enabled by default. I captured the firmware update process and created custom firmware to enable password authentication for ssh.

Crazy world: I'm now running my whole #podcast setup including #ultraschall and my #rodecaster on #fedora #silverblue #linux and it just works 🤩

Engadget (@engadget)

Rode가 'Rodecaster Video Core'를 공개했다는 소식으로, 해당 제품은 라이브스트리밍 비용을 낮추고 더 저렴한 스트리밍 솔루션을 제공하는 하드웨어 제품임을 알림. 방송·스트리밍 장비 시장에서 가격 경쟁력 있는 옵션으로 주목받음.

https://x.com/engadget/status/2031144628808741062

#rodecaster #livestreaming #hardware #broadcast

Engadget (@engadget) on X

Rode’s Rodecaster Video Core makes livestreaming even cheaper https://t.co/9OhKykAIWy

X (formerly Twitter)
The RodeCaster Video Core Connects up to Four Cameras into a Production

The RodeCaster Video Core allows users to connect up to four cameras to create a fully customized video production.

PetaPixel

The RODE RODECaster Video S is a compact, all‑in‑one video and audio production console that lets creators switch cameras, mix audio, record, and stream professional‑quality content from a single intuitive device. But it is retailed at $$799 on their website.

https://rode.com/en-us/products/rodecaster-video-s

#Rode #Rodecaster #video

Rode Streamlines its A/V Console into Smaller, Cheaper RodeCaster Video S

Rode has announced the RodeCaster Video S, a streamlined and more affordable option in its all-in-one video and audio production consoles.

PetaPixel

today's rabbit hole:

Giving pipewire a third chance to do my audio routing for me

I think it clicked today, and I have the solution I was hoping for in the first place!

I have an USB audio interface with a built in mixer (so that I can for example control the volume of music and a game independently with a physical fader) and it obviously doesn't have any first party linux software support - all my computer sees is a single device with 10 input channels, with no way of knowing that channels 4 and 5 are meant for "music"

My first attempt at this was with qpwgraph which technically worked, but failed to start about once a week, and it really didn't like me unplugging the interface. The 2nd one involved two null-audio-sinks and still qpwgraph - that at least made it so that I only had to reconnect four channels when the config got screwed up again, but it didn't do anything about the occasional crash

Today's success involved the loopback module, which has the neat option of specifying a preferred target device to pipe the audio to - and apparently that just does not care if the preferred device disappears, it reconnects just fine when available

So now I have two new virtual audio devices that are there no matter what, can do all my routing through the system's native audio settings, and the whole thing doesn't go belly-up when I turn off the interface, and the whole thing only needs a single config file and no external dependencies other than pipewire! Wohoo!

In case anyone's interested (or I need this again in four years), here's the config: https://gist.github.com/Sirs0ri/5f18c26d9380d91fe3d53aea591df0f4

#pipewire #RodeCaster #AudioInterface

Pipewire config to create virtual devices for a Rodecaster duo

Pipewire config to create virtual devices for a Rodecaster duo - 10-rodecaster-virtual-devices.conf

Gist

Videotuotanto- ja livestriimauslaite RØDECaster Video sai tuoreen ohjelmistopäivityksen myötä uusia kaivattuja ominaisuuksia. Laite on ollut minulla testissä tammikuusta asti ja lähetin RØDElle keväämmällä palautetta toive- ja puutelistan kera. Noin puolet omista toiveista toteutui tänään julkaistussa päivityksessä. Erinomaista palvelua, näin sitä pidetään asiakkaat tyytyväisenä. 👍🏻

https://youtu.be/I5lUU-D6rmA?feature=shared

#videotuotanto #videoproduction #striimaus #streaming #Cascadeus #RØDE #RØDECaster

'CallMe' Connects RodeCasters For Seamless Long-Distance Podcasting

CallMe for RodeCaster Pro II and RodeCaster Duo adds the ability to connect the devices remotely to one another.

PetaPixel

The RØDECaster Video is an all-in-one video and audio production console. It provides a powerful video switching, recording and production capabilities with a fully integrated professional audio mixer.

Unfortunately, it also comes with a hefty $1200 US pricetag, which makes it too expensive for most users with a low budget. The alternatives might be the Blackmagic Design ATEM Mini Pro or the OSEE GoStream Deck, both come in at around $295 US.

https://rode.com/en-us/interfaces-and-mixers/rodecaster-series/rodecaster-video

#Rode #Rodecaster

RØDECaster Video | Video- und Audioproduktionskonsole | RØDE

Der RØDECaster Video ist eine revolutionäre All-in-One-Video- und Audio-Produktionskonsole, die eine intuitive Steuerung über jedes Element Ihres Inhalts bietet.