Pandora Case Prototype

[youtube=http://www.youtube.com/watch?v=6T6zzV1vmOI]

The last time we checked in on Pandora it was just being shown in dev unit form. Embedded above is a video of the first case prototype. It doesn’t have any components yet, but it definitely looks like a good formfactor with a lot of potential. The Pandora is a Linux based portable game console with an 800×480 touchscreen.

[via Gizmodo]

Malware Posing As Change.gov

change

PandaLabs has identified a botnet running a malware campaign impersonating president-elect Obama’s website. The front page of the site features a sensational story titled “Barack Obama has refused to be a president”. Clicking the link will download the malware and make the target’s machine part of the botnet. They’re using fast-flux to assign the malicious domains to the massive number of compromised nodes that are hosting the actual site. The team has contacted the domain name registrar in China to get the domains removed. Using a sensational headline is not new to malware; it’s how the Storm Worm got its name.

[via lithium]

IPod Touch 2G Jailbreak Demoed

redsn0w

Now that the iphone-dev team has unlocked the iPhone 3G they’re moving onto jailbreaking the iPod Touch 2G. While they have a fully working jailbreak, it’s not yet in a user friendly format. [MuscleNerd] did a live video demo this afternoon to show what progress they had made. It starts with him showing the iPod on but not booting. He’s already patched the kernel, but it’s failing the signature check in iboot. He then uses the team’s recoverytool to exploit a hole in iboot and patch out the signature check. The ipod then boots normally and he shows non-App Store software like Mobile Terminal, Cydia, and an NES Emulator (which makes use of the iPod’s internal speaker).

The redsn0w jailbreak works, but it has to be applied via tether every time the iPod boots. The team won’t release anything until they’ve found a way around this problem. For more insight into the boot process, check out our coverage of their Hacking the iPhone talk at 25C3.

Dismantling The Storm Worm Botnet

malware

Zero Day has an interview with German researchers who have found a way to take down the Storm Worm botnet. Their program, Stormfucker, takes advantage of flaws in Storm’s command network: Nodes that are NAT‘d only use a four-byte XOR challenge. Nodes that aren’t NAT’d are only using a trivial 64bit RSA signature. Their solution can clean infected machines and also distribute to other nodes. Unfortunately, installing software without the user’s consent is the exact same behavior as malware. Don’t expect to see this in any sort of widespread use. The researchers did point out that some ISPs have moved to shutting off service for infected customers until their machines are cleaned.

Power Suit For Japanese Farmers

power_suit

Researchers at Tokyo University of Agriculture and Technology have been demoing a new power suit. It’s intended to be used by people hand harvesting in the farm industry. The 55 pound device supports the worker’s joints as they squat and reach. Within three years, they hope to have the cost within $10K. We’ve seen quite a few power suit devices this year, but research has been going on for many years, as you can see in our power suit roundup.

[Thanks Lane]