Zero Day has an interview with German researchers who have found a way to take down the Storm Worm botnet. Their program, Stormfucker, takes advantage of flaws in Storm’s command network: Nodes that are NAT‘d only use a four-byte XOR challenge. Nodes that aren’t NAT’d are only using a trivial 64bit RSA signature. Their solution can clean infected machines and also distribute to other nodes. Unfortunately, installing software without the user’s consent is the exact same behavior as malware. Don’t expect to see this in any sort of widespread use. The researchers did point out that some ISPs have moved to shutting off service for infected customers until their machines are cleaned.
News3564 Articles
Power Suit For Japanese Farmers
Researchers at Tokyo University of Agriculture and Technology have been demoing a new power suit. It’s intended to be used by people hand harvesting in the farm industry. The 55 pound device supports the worker’s joints as they squat and reach. Within three years, they hope to have the cost within $10K. We’ve seen quite a few power suit devices this year, but research has been going on for many years, as you can see in our power suit roundup.
[Thanks Lane]
Libelium Arduino Contest
Libelium is holding another Arduino Open Hardware contest. Just create a how-to by April 15th that makes your daily life easier. Prizes include GPS, GPRS, SD, and solar modules designed for the Arduino.
Defcon Calls For New CTF Organizer
Kenshoto, organizer of the official Defcon Capture the Flag contest for the last four years, has stepped down from the position, and thus Defcon is looking for a new organizer for the event. If you’re highly competent, and maybe a little crazy, this might be your chance to step in and run one of the most well-known and prestigious hacking contests in the world. Please understand that the staff is looking for someone who wants to take ownership of the contest and make something new, unique, and challenging, and that Kenshoto has left extremely huge shoes to fill. Merely offering to replicate the existing contest and keep things mostly unchanged isn’t going to cut it.
If you’re up to the challenge, check out Dark Tangent’s post on the Defcon forums (which, for some odd reason, sounds strikingly like his 2005 post calling for a CTF organizer), where he comprehensively lays out what the staff is looking for in a new event organizer. If it jives well with you, get in touch with the Defcon staff, and maybe we’ll be covering your contest later this year.
Apple Forces Wired To Take Down Netbook OSx86 Video
Wired Gadget Lab has taken down a video made by [Brian X. Chen] in which he gives a brief overview and demonstration of how to install OSX on an MSI Wind netbook. This apparently didn’t sit well with Apple, who contacted Wired and complained; Wired agreed and removed the video. Frankly, we’re disappointed with Wired’s response. While they were technically posting content which is questionable at best—in the video, Brian mentions that this is illegal and that it would be a good idea to have a retail copy of OSX on hand, but then goes on to point out that you can also download the hacked operating system off The Pirate Bay, Isohunt, etc—the video in and of itself wasn’t illegal, and thus Wired comes off as susceptible to what amounts to bullying by Apple. We’re all about creativity and innovation, and stifling that innovative spirit has never worked well in the long run.
Fortunately, if you’re feeling like you’ve missed out on the video, don’t despair: Gizmodo has posted the video on their website for you to view and enjoy.
[photo: Brian X. Chen]
A History Of SparkFun Prototypes
If you haven’t checked out SparkFun Electronics’ prototype collection yet, you’re missing out. They unearthed many of their old prototypes and published them to show what kind of mistakes could be made. You’ll see plenty of errors and get hints on what to look for while developing your own hardware. This pairs well with their Design for Manufacture post. Along with the pile of broken board iterations, they also walk through how the company developed. Finally, they specifically cover the individual iterations of the BlueSMiRF.
One of the interesting modules in the gallery that never saw full release was the SparkFun Toys line pictured above. The individual units used the standoffs as the power and data bus. The four posts were arranged so they could only be connected in one orientation: power, ground, TX, and RX. It’s an interesting idea that seems like it might be worth exploring further. SparkFun says that it worked fine, but didn’t feel they had the resources to market it to the intended audience.
Windows Drivers For PS3 Controllers
Recently, a Japanese coder on the DCEmu Forums released Windows drivers for DualShock 3 controllers. While the drivers only support using the controllers over USB and not bluetooth, they do include force feedback and Sixaxis support. Included with the drivers is a configuration tool, and though it appears to be in Japanese there is some explanation of how to use it included in the forum post. We have not tested these personally, but you can try out the drivers for yourself by downloading them from the forum here.
[photo: William Hook]