Plug And Prey: Malicious USB Devices

This very informative talk given at Shmoocon 2011 has been posted over at IronGeek. Covering all kinds of angles that a person could attack someones computer through the USB port, this should be read by anyone who is security minded at all. No matter which side of the port you tend to be on, this article has great information. They cover some common attack methods such as keyloggers and fake keyboards as well as some common methods of securing your system against them. We’ve actually seen this in the news a bit lately as people have been using the keyboard emulation method in conjunction with android phones to hack into systems.

[thanks Adrian]

Amarino Makes Android Controlled Robots A Snap

[Lucas Fragomeni] is controlling this robot using the accelerometer on his Android phone (translated). He could have gone through our Android tutorials and developed a custom application but he took the shorter route and used Amarino, an ‘Android meets Arduino’ toolkit, to do it for him. [Lucas] combined an Arduino, a BlueSMiRF Bluetooth modem, and two servo motors to build his robot. Amarino lets him connect to that Bluetooth modem and send sensor data over the connection. In this case it’s only the accelerometer that he chose to use, but he could have gone with the touchscreen, or any other sensor the handheld has to offer. Using this code package got him up and running quickly, only requiring that he writes his own code to turn the received signals into servo motor control routines. See it in action after the break.

Continue reading “Amarino Makes Android Controlled Robots A Snap”

Nook Color Rooted: Hands On

Nookdevs have released information on how to root your nook color. So naturally, I had to run out and get one.  Who doesn’t want a multitouch android tablet for $250?  The instructions for rooting are extremely simple. You really only need microSD card and a Linux/Windows/Mac computer to connect to.  After rooting, your nook will work exactly as it did before, but you can now install android applications on it.  Many applications are built for a phone that has more physical buttons, so I have run into some issues, but over all, the applications that work tend to work well.

Join me after the break for more thoughts, a video of it in action, and a few pictures.

Continue reading “Nook Color Rooted: Hands On”

Permanent Root Exploit Found For G2

The g2 has finally been rooted. Even though a temporary root exploit was found shortly after the phones release, a NAND lock prevented modifying the non-volatile RAM for a permanent root. Some controversy surrounded the g2 when it was erroneously thought to have a rootkit protecting the OS.  Supposedly the rootkit would watch for changes to the file system and then reset the phone to default settings when any unauthorized changes were made.  On the other hand a NAND lock functions by fooling the operating system into thinking there isn’t any memory available, essentially “locking” the memory in key areas.  Once it was discovered to have the NAND lock it was only a matter of time before the g2 was permanently rooted.  NAND locks have become a popular (and unsuccessful) deterrent employed by device makers to stop the jailbreaking comunity.  While this exploit is nothing groundbreaking it is another notch in the belt for the jailbreaking community and a welcome benefit to g2 users.

Android Talks Pulsewave

Serial communications are a mainstay of digital computing. They don’t require much physical infrastructure and they exist in variations to fit almost any application. The behaviour of serial communications lines, varying from high to low voltage in a timed pattern, is analogous to a 1-bit DAC. Using a whole DAC for serial communication would be a waste in most cases, but the [RobotsEverywhere] team found an exception which you may have encountered already.

Since the audio output of the Android is accessible and addressable, [RobotsEverywhere] wrote source code to use the left and right channels as separate serial communication lines. This circumvents the need to bust into the device and muck about with the hardware which is great if you want a no-risk hack that allows communications to an RS232 port. Any hardware on which you can write to the DAC (and control the sampling rate) is a potential target.

There are some external electronics required to convert the audio signal to TTL, but it’s not very complicated–a couple of comparators and change. You can see it in action after the break.

As a bonus, when you’re done for the day you can plug in your headphones and listen to the soothing poetry of pulse waves all night long.

Continue reading “Android Talks Pulsewave”

Android On IPhone: New Treats

It seems that the iPhone 2g and 3g are the newest phones to get Android 2.2, codenamed Froyo. The process for installing Froyo if you have a jailbroken device seems to get even easier every time, with this revision being as simple as adding a repository, downloading Froyo, and pressing go. Follow the link for a wonderful step by step guide, complete with screenshots to take out all of the guess work. Android on iPhone sure has come a long way since the first time we covered it.

[via reddit]

SNES Controller Dock For Dell Streak

The Dell Streak is an Android tablet. [Collin Meyer] wanted to use an original SNES controller to play emulated games on the device. What he came up with is a controller that is a dock for he handheld.

Several things have to come together to make this happen. The Streak uses a standard PDMI dock that connects to a computer via a USB connection. [Collin] repurposed a sync cable by connecting a couple of pins on the dock connector which forces the device to use USB host mode. From there he used a Teensy microcontroller to convert the SNES controller into a USB device (very similar to this hack). The Teensy and shortened sync cable find a new home inside the SNES controller body and, in the video after the break, it looks like he used something like sugru to add a bit of support for the Streak.

Continue reading “SNES Controller Dock For Dell Streak”