tag:blogger.com,1999:blog-6322916946732811685.post2545442269815021577..comments2024-03-28T09:46:22.919-04:00Comments on Borepatch: The security Silly Season is upon usBorepatchhttp://www.blogger.com/profile/05029434172945099693noreply@blogger.comBlogger13125tag:blogger.com,1999:blog-6322916946732811685.post-83562047385109813832012-07-25T16:44:10.574-04:002012-07-25T16:44:10.574-04:00Well, keep in mind that the externals of the thing...Well, keep in mind that the externals of the thing can be tweaked within certain limits. And made to resemble a product from a locally abundant manufacturer — "local" in the sense of being commonly found (hence appearing normal and ordinary) in Chinese or Pakistani internet cafes...<br /><br />Seriously, this kind of black manufactured item can be used for both good (us against them) as well as bad (them against us).<br /><br />I'm sure we've got ample enough craftyness to make these things ourselves (and deploy where useful for us). My worry is more the mindset that we're just so damn smart no one could pull something similar on us.<br /><br /><i>That's</i> the kind of complacency that really hurts us.Anonymousnoreply@blogger.comtag:blogger.com,1999:blog-6322916946732811685.post-76681369005177828642012-07-24T15:36:34.799-04:002012-07-24T15:36:34.799-04:00I am so glad I know you people cuz I am clueless o...I am so glad I know you people cuz I am clueless on so many of these things.agirlandhergunhttps://www.blogger.com/profile/08369419666474343639noreply@blogger.comtag:blogger.com,1999:blog-6322916946732811685.post-26154133120169424412012-07-24T06:39:07.587-04:002012-07-24T06:39:07.587-04:00That 'power-pwn' thing ... I'm not sur...That 'power-pwn' thing ... I'm not sure how successful it would be. Or rather, how long it would last. <br /><br />Now I'll admit I'm a compulsive noticer-of-things. Maybe nobody else would see it. But to me, that doesn't <i>look</i> like a modern power strip. First, I've never seen a power strip in which every outlet has room for a wall wart without interfering with the outlet next to it. Second, this is a large dual-row unit, the kind you'd use in an office or an entertainment center, but it has no color coding, no display window, no indicator lights, no warning stickers, and no extra ports for giving protection to cable TV, phone, and who knows what else. <br /><br />Any modern IT/network guy who saw that lurking under a desk and didn't have at least a tiny trace of curiosity cross the back of his mind...wolfwalkernoreply@blogger.comtag:blogger.com,1999:blog-6322916946732811685.post-3572953426754547782012-07-24T00:35:33.285-04:002012-07-24T00:35:33.285-04:00Ruth I tried that but got arrested apparently they...Ruth I tried that but got arrested apparently they didn't like the maids uniform.Anonymousnoreply@blogger.comtag:blogger.com,1999:blog-6322916946732811685.post-1646452616942840192012-07-23T22:21:03.388-04:002012-07-23T22:21:03.388-04:00Interesting that I've already gotten comment s...Interesting that I've already gotten comment spam flogging security devices. Let's keep safe out there.Borepatchhttps://www.blogger.com/profile/05029434172945099693noreply@blogger.comtag:blogger.com,1999:blog-6322916946732811685.post-24236890580083176032012-07-23T21:31:36.680-04:002012-07-23T21:31:36.680-04:00Ruth: Agreed, for residential and commercial meter...Ruth: Agreed, for residential and commercial meters. But the big iron used to control the grid and power plants is locked up in substations. Usually.Dave Hhttps://www.blogger.com/profile/04813274491601970838noreply@blogger.comtag:blogger.com,1999:blog-6322916946732811685.post-8345761563434961692012-07-23T20:43:09.076-04:002012-07-23T20:43:09.076-04:00Mitnick demonstrated something like that last year...Mitnick demonstrated something like that last year. His was some kind of wall wart that had some official looking badge on it, so he could plug it in and no-one would mess with it. He used it during a pentest at some government facility or another by plugging it into an external power outlet after talking his way through the front gate and being invited on a facility tour.DaddyBearhttps://daddybearsden.wordpress.comnoreply@blogger.comtag:blogger.com,1999:blog-6322916946732811685.post-77762563653463639432012-07-23T20:01:52.407-04:002012-07-23T20:01:52.407-04:00Dave: dress up in a uniform, and wander the neighb...Dave: dress up in a uniform, and wander the neighbor hood early/mid afternoon. Access to outdoor meters no problem.Ruthhttps://www.blogger.com/profile/11924993310937754220noreply@blogger.comtag:blogger.com,1999:blog-6322916946732811685.post-63865412056426556402012-07-23T19:52:37.562-04:002012-07-23T19:52:37.562-04:00Good 'report' and we all now this is just ...Good 'report' and we all now this is just the TIP of the iceberg...Old NFOhttps://www.blogger.com/profile/16404197287935017147noreply@blogger.comtag:blogger.com,1999:blog-6322916946732811685.post-8791839647689758622012-07-23T19:48:24.717-04:002012-07-23T19:48:24.717-04:00The Power Pwn! Nifty little device, I just can'...The Power Pwn! Nifty little device, I just can't believe some .mil agency would bankroll such a thing. /sarc<br /><br />If it ain't APC it ain't for me. O' course, it APC ever gets any DARPA subcontracts it might not be for me anymore (they don't do they?!?).Anonymousnoreply@blogger.comtag:blogger.com,1999:blog-6322916946732811685.post-54478649323282256812012-07-23T18:48:28.506-04:002012-07-23T18:48:28.506-04:00If Termineter is a smart meter hacking tool then ...If Termineter is a smart meter hacking tool then Hyperterminal can be used to hack the Pentagon. The protocols it uses (ANSI C12.18 and .19, also called ANSI Tables) aren't used by anybody as far as I can tell, and I work in the industry.<br /><br />My meters have minimal support for ANSI Tables because utilities like to see it on the brochure. But every time someone asks for it we ask them, "What are you going to read it with?" They never have an answer. There are software products that know a number of manufacturers' proprietary protocols, including our own, but they don't do ANSI Tables.<br /><br />Besides, that serial optical port they're talking about isn't even wireless. It's just a 9600 bps serial port that uses infrared LEDs instead of RS-232. You'd need the special connector to attach to it, or cobble together something with perfboard and LEDs from Radio Shack. Either way you'll need physical access to the meter to interrogate it.Dave Hhttps://www.blogger.com/profile/04813274491601970838noreply@blogger.comtag:blogger.com,1999:blog-6322916946732811685.post-40697100925450565442012-07-23T17:07:11.951-04:002012-07-23T17:07:11.951-04:00And yet I can't get through to people WHY I DO...And yet I can't get through to people WHY I DON'T WANT A SMART METER. Dammit.Ruthhttps://www.blogger.com/profile/11924993310937754220noreply@blogger.comtag:blogger.com,1999:blog-6322916946732811685.post-63606538557265294722012-07-23T16:44:17.308-04:002012-07-23T16:44:17.308-04:00The power strip is the size of a house brick maybe...The power strip is the size of a house brick maybe that should clue people in. Probably has made in China.Anonymousnoreply@blogger.com