Cloudbleed — Your Credentials Cached In Search Engines

February 24, 2017 by Pedro Umbelino 25 Comments

In case you are still wondering about the SHA-1 being broken and if someone is going to be spending hundreds of thousands of dollars to create a fake Certificate Authority and sniff your ~~OkCupid~~ credentials, don’t worry. Why spend so much money when your credentials are being cached by search engines?… Wait, what?

A serious combination of bugs, dubbed Cloudbleed by [Tavis Ormandy], lead to uninitialized memory being present in the response generated by the reverse proxies and leaked to the requester. Since these reverse proxies are shared between Cloudflare clients, this makes the problem even worst, since random data from random clients was leaking. It’s sort of like Heartbleed for HTTP requests. The seriousness of the issue can be fully appreciated in [Tavis] words:

“The examples we’re finding are so bad, I cancelled some weekend plans to go into the office on Sunday to help build some tools to cleanup. I’ve informed cloudflare what I’m working on. I’m finding private messages from major dating sites, full messages from a well-known chat service, online password manager data, frames from adult video sites, hotel bookings. We’re talking full https requests, client IP addresses, full responses, cookies, passwords, keys, data, everything.”

According to Cloudflare, the leakage can include HTTP headers, chunks of POST data (perhaps containing passwords), JSON for API calls, URI parameters, cookies and other sensitive information used for authentication (such as API keys and OAuth tokens). An HTTP request to a Cloudflare web site that was vulnerable could reveal information from other unrelated Cloudflare sites.

Adding to this problem, search engines and any other bot that roams free on the Internet, could have randomly downloaded this data. Cloudflare released a detailed incident report explaining all the technicalities of what happened and how they fixed it. It was a very quick incident response with initial mitigation in under 47 minutes. The deployment of the fix was also quite fast. Still, while reading the report, a sense that Cloudflare downplayed this issue remains. According to Cloudflare, the earliest date that this problem could have started is 2016-09-22 and the leak went on until 2017-02-18, five months, give or take.

Just to reassure the readers and not be alarmist, there is no evidence of anyone having exploiting what happened. Before public exposure, Cloudflare worked in proximity with search engines companies to ensure memory was scrubbed from search engine caches from a list of 161 domains they had identified. They also report that Cloudflare has searched the web (!), in sites like Pastebin, for signs of leaks and found none.

On the other hand, it might be very well impossible to know for sure if anyone has a chunk of this data cached away somewhere in the aether. It’s impossible to know. What we would really like to know is: does [Tavis] get the t-shirt or not?

What Does A Hacker Do With A Photocopier?

February 24, 2017 by Lewin Day 130 Comments

The year is 2016. Driving home from a day’s work in the engineering office, I am greeted with a sight familiar to any suburban dwelling Australian — hard rubbish. It’s a time when local councils arrange a pickup service for anything large you don’t want anymore — think sofas, old computers, televisions, and the like. It’s a great way to make any residential area temporarily look like a garbage dump, but there are often diamonds in the rough. That day, I found mine: the Ricoh Aficio 2027 photocopier.

It had spent its days in a local primary school, and had survived fairly well. It looked largely intact with no obvious major damage, and still had its plug attached. Now I needed to get it home. This is where the problems began.

Continue reading “What Does A Hacker Do With A Photocopier?” →

Toast-Bot Butters For You (Sometimes)

February 24, 2017 by James Hobson 11 Comments

Sometimes — despite impracticality, safety, failure, and general good sense — one has an urge to see a project through for the sake of it. When you’re sick of buttering your toast every morning, you might take a leaf out of Rick Sandc– ahem, [William Osman]’s book and build a toast-bot to take care of the task for you.

[Osman] — opting for nail the overkill quotient — is using a reciprocating saw motor to hold the butter while the toast moves underneath the apparatus on a platform controlled by a linear stepper motor. The frame and mounts for Toast-Bot were cut out of wood on his home-built laser cutter — affectionately named Retina Smelter 9000′ — and assembled after some frustration and application of zip-ties. The final result DOES butter toast, but — well — see for yourself.

Continue reading “Toast-Bot Butters For You (Sometimes)” →

3D Printing Using Holograms Is Actually Printing In 3D

February 24, 2017 by Steven Dufresne 33 Comments

It’s the year 2260 and you’re being beamed from your starship to the planet below. Being a descendant of present day 3D printers, the transporter prints you out, slowly making one layer before moving on to the next, going from the ground up. The you-that-was hopes nothing spills out before you’re done. But what if you could print every atom in your body at the same time? If those transporters are descendant’s of Daqri’s holographic 3D printing technology then that’s just what will happen.

Daqri’s process is akin to SLA (stereolithography) and SLA/DLP (digital light processing). In SLA, a laser beam is shone onto a pool of resin, hardening the resin at the beam’s point. The laser scans across the resin’s surface, drawing one layer. More resin is added and then the next layer is drawn. In SLA/DLP, the light for an entire layer is projected onto the surface at once. While both methods involve stereolithography, the acronym SLA by itself is commonly used to refer to the laser approach.

Daqri’s process however, uses a holographic chip of their own making to project the light for all the layers at the same time into the material, a light-activated monomer. Their chip is a silicon wafer containing a grid of tunable crystals. Those crystals control the magnitude and phase of light reflected down into the monomer, creating a 3D volume of interference patterns. The brief description of the process says that a laser is used to shine light onto the crystals, so there’s probably still some scanning going on. However, in the video, all of the object being printed appears illuminated at the same time so the scanning is likely very fast, similar to how a laser in a light show seemingly paints what appears to be a 2D shape on the side of a building, even though it’s really just a rapidly moving point. There’s also the possibility that the beam’s point is large enough to encapsulate all of the chip at once. You can see a demonstration of it in the video below.

Continue reading “3D Printing Using Holograms Is Actually Printing In 3D” →