{"id":8034,"date":"2015-09-06T10:42:16","date_gmt":"2015-09-06T17:42:16","guid":{"rendered":"http:\/\/crimeandtheforcesofevil.com\/blog\/?p=8034"},"modified":"2015-09-06T10:42:16","modified_gmt":"2015-09-06T17:42:16","slug":"i-dont-even-know-where-to-start","status":"publish","type":"post","link":"https:\/\/crimeandtheforcesofevil.com\/blog\/2015\/09\/06\/i-dont-even-know-where-to-start\/","title":{"rendered":"i don't even know where to start"},"content":{"rendered":"

Seagate and LaCie make wireless external hard drives for mobile use, so you can ‘expand your phone’ and carry around whatever external data you’d like to carry around without blowing your phone’s storage. I guess that’s useful. I imagine people also use them as ‘personal cloud’ devices, whatever the hell that’s supposed to mean, and other things.<\/p>\n

But I don’t care, really, because THEY SHIP WITH AN UNDOCUMENTED TELNET SERVER RUNNING WITH ROOT ACCESS<\/a>. You can read and write anything and everything.<\/p>\n

This is… amazing<\/em>. How do you let this happen? It’s another case where I need an Industrial Espionage Inside! logo sticker. Here, have a first draft.<\/p>\n

<\/center><\/p>\n

On a related note, this talk at Black Hat 2013 on hacking z\/OS mainframes<\/a> is pretty cool, and tells me that back in my part of the problem<\/em> days that I could’ve been a goddamn rock star in this admittedly-small field at Black Hat, because the shit I was doing on IBM mainframes was way<\/eM> more complicated and subtle than this.<\/p>\n

There are mainframe people in comments telling the presenter not to be so glib about mainframe security because they know exactly what you’re doing via their monitoring systems. I heard that shit then, too; it was bullshit at the time and I’m pretty sure it’s bullshit now given the sploits he’s outlining. Hell, I submitted some reports through trusted third parties because they were just too easy – easier than these, even, and some of this is pretty damn easy.<\/p>\n

I mean, seriously, ever seen a security patch for an unpublicised exploit released in one day<\/eM>? I have. That was caused by one of my third-partied reports. (Arbitrary access to any account in 19 keystrokes, completely unlogged. It was hilarious<\/em>. But also too easy, so, reported. I knew exactly what they were doing wrong and how to fix it, so it’s not like they had to work at it.)<\/p>\n

But enough of the past. Go play skeet shooting with your wireless Seagate and LaCie drives now. It’s probably more effective than trusting them.<\/p>\n","protected":false},"excerpt":{"rendered":"

Seagate and LaCie make wireless external hard drives for mobile use, so you can ‘expand your phone’ and carry around whatever external data you’d like to carry around without blowing your phone’s storage. I guess that’s useful. I imagine people also use them as ‘personal cloud’ devices, whatever the hell that’s supposed to mean, and [&hellip<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[9],"tags":[],"class_list":["post-8034","post","type-post","status-publish","format-standard","hentry","category-random-coolness"],"_links":{"self":[{"href":"https:\/\/crimeandtheforcesofevil.com\/blog\/wp-json\/wp\/v2\/posts\/8034","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/crimeandtheforcesofevil.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/crimeandtheforcesofevil.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/crimeandtheforcesofevil.com\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/crimeandtheforcesofevil.com\/blog\/wp-json\/wp\/v2\/comments?post=8034"}],"version-history":[{"count":0,"href":"https:\/\/crimeandtheforcesofevil.com\/blog\/wp-json\/wp\/v2\/posts\/8034\/revisions"}],"wp:attachment":[{"href":"https:\/\/crimeandtheforcesofevil.com\/blog\/wp-json\/wp\/v2\/media?parent=8034"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/crimeandtheforcesofevil.com\/blog\/wp-json\/wp\/v2\/categories?post=8034"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/crimeandtheforcesofevil.com\/blog\/wp-json\/wp\/v2\/tags?post=8034"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}