At RSA, when you’re at one of the main hotels, vendors leave marketing stuff at your door or in your room.
Cisco distributed full-on video players with built-in li-ion batteries and I just now found time to dig into it.
At RSA, when you’re at one of the main hotels, vendors leave marketing stuff at your door or in your room.
Cisco distributed full-on video players with built-in li-ion batteries and I just now found time to dig into it.
That really only happens to me: I am still doing some carnival event related things in my hometown. Last week the owner of the company contracted for stage audio and lighting approached me (he's been doing that for years and we know each other from these events) and told me he recently wanted to buy a single photo printer and found one on a surplus auction website. What ye didn't realize was that he ordered a whole pallet of these fucking things for less than 200€.
Now he sits on a bunch of these printers, but the catch is they are an OEM variant and the media kits (paper and ink essentially) are differently coded and incompatible between the OEM version he has and the original. Theory is it's all just software enforcing that as usual. He has a firmware updater containing the original firmware, but the updater refuses to install it.
Me: "Can't be that hard to convince the thing otherwise"
Him: "Okay, I'll get you one next week if you want"
Now I have one of these printers in the back of my car. Dude knew exactly how to nerd-snipe me and I'm not even mad.
I just asked him for the original firmware. He downloaded it on his phone, extracted the Zip and I saw a ".S" file next to the exe that is the updater. In the preview on the iPhone the file format looked familiar.
Me: "Can you open that file there? Oh look! That's a Motorola S-Record file! And that's most likely the firmware. And you see these patterns all over the place? It's not even encrypted..."
Him: "What the fuck?"
He also got me two weird Intel Atom kiosk PCs with an 11 inch touchscreen in the front: "Oh, these are terminals that are usually connected to these printers in shops where you can have your pictures printed. I thought you might have some use for them, so I brought you two as well. I paid about 0,70€ per box, just take them"
🤷♂️
Drones are hot - their security is not. Here is how we removed the NAND, dumped firmware, and reverse-engineered ECC on a consumer drone. Stay tuned for part 2! https://neodyme.io/de/blog/drone_hacking_part_1/