Let's play a game. How many loops are in this beautifully formatted C code snippet? What kinds of loops are they (e.g. while-loop, do-while loop, for-loop)?

morning

@NickAlexeev Keil doesn't warn for/against braceless do?

Why isn't he complaining about dead hangs?

stm32 wdt enabled by default?

Mhwarmgrmbl

@Asmyldof Possibly (?) he's complaining that he doesn't hang in the infinite loop when he expects to.

I don't know about C but in C++ infinite loops ae UB so can be replaced by nops

Or rather a certain subset of infinite loops

Like for();

@NickAlexeev Okay looking serious now

Aaaannndd wtf; where's the null termination? Overwriting a char* with 100 times ' ' is a good way to make strstr look through indeterminate amounts of memory

Whizz Systems is proud enough of its name to whizz spam all over the interwebs.

p.s. If the links will appear dead, that's because he got nuked.

@NickAlexeev Is it incidental that the logo looks similar to wiznet?

I think they're unrelated, but the similarity is not incidental. Trying to lift with a well known name.

@NickAlexeev I don't understand the "spam" link. --Edit: But that's of course because the answer got deleted :/

@jippie know what the answer entailed, since Nick will be sleeping now, or at the least should

Their stuff leaves me entirely unwhelmed as well. Not even give me the energy to be underwhelmed

@Asmyldof I somehow received an ethernet module. I don't mind the thing although I am probably looking at it more from a hobby perspective than you are.

@jippie Dunno, it's probably fine. It just does not whelm me

Damn friendly Dutch people... Every time you try to apply your three words of Dutch you are drowned in a German reply ^^

So i have this kingston usb stick bought on amazon

it suddendly decided it's write protected, and that's quite a common problem actually

it's still under warrantee, so I could send it in for a new one

but how can I erase my personal data, that still are perfectly readable?

I know I can fry it with some thigher-than-5V voltage but I don't want it to catch fire or they won't accept it

you know it's just like 7€ but hey, its some 16 months old

@VladimirCravero how do you earn your money? 8 h a day job, or freelancing?

I'll start tomorrow

8h job

I know, it's not worth the effort is it?

Unless you have to work 20hours for one stick....

i have to work some half hour for the stick

I guess I'll just crack it open for the pleasure of doing it then

When you are a freelancer, the math is quite simple. You can't earn money in the time you are playing with it, so those are the costs then

@VladimirCravero get a better job then that payz a stick every 15 minutes ;)

well that's an objective for the future

there's no limit in the sitcks per minute(s) pay

I opened it, grabbed the memory chip number, searched for it, and some russian obscure forum suggested to use a restorer... that actually worked

@VladimirCravero restorer?

some crappy and suspect exe

that actually did the job

@VladimirCravero you actually ran russian software from an obscure source on your PC

yeah

it's windows

i don't really care

Say that the software is just that, restoring your USB stick. Then it would be very interesting to figure out how it works, because apparently you seem to be communicating with the hardware itself rather than the bulk storage device. Wouldn't be the first time that someone is able to inject his own program onto a memory stick's controller.

so you're implying my stick can infect machines and such?

it's been done before

not saying that yours can

but it's been done before.

that's interesting

wondering if it's possible to check for that

there was an article the other day about a memory stick having an 8051'ish controller that can be flashed with alternative firmware

my av didn't care much while i run the exe

nor did i need to use admin rights

it is easy to create a payload that isn't spotted by AV. Can't recall the name of the tool we usually use for that .. let me think for a moment while I inspect my fridge.

veil-framework.com/framework

there are even linux CD-based distributions that hold all that sort of tooling.

kali linux is a major one.

kali.org

penetration testing

lulz

@VladimirCravero it is about computer systems smart ass (pun intended)

eheh

I could reformat the whole thing under linux but if there's some sort of mitm on the controller chip this would not hel

p

that is the whole idea. I believe it was on several of the major IT security websites and hack-a-day.

so what could happen

they might add their rootkit/exploit on any exe that passes by

there is no way of telling if this is the case.

but

if it was

then .. I guess anything

might create an empty .exe file and copy it back to the pc and scan it

yeah I was wondering on what you could do with such an attack, you can't send sensible data anywhere

you're the controller of a usb stick after all

files can be changed, dropped. A file with a known signature can be changed, say an kernel.exe could be changed to something else (bad example, who would keep his kernel on a USB stick)

or, what the hack-a-day article described ... it can act as a keyboard and mouse, issuing keyboard shortcuts and commands

i've checked that

I actually have a mouse with a mind of its own :-D it starts to send emails when it is left plugged in for a while

it seems that only the mass storage device appears

when I connect it

you'll probably be fine

if the binary was less than 1kB in size :-p

885KB :P

No way to know unless you reverse engineer the binary.

yep

I sometimes miss the times where we did such hacks

@PlasmaHH it is happening here and now. It is really hot. Same story in industrial and IoT devices.

@jippie I meant specifically we as in including me... The 90s were fun

@PlasmaHH aren't you a bit young for a midlife crisis?

@jippie you are never too young for that when you a) started with programming at the age of 7, and 3) have kids

@PlasmaHH omg, when I was aged 7 people would only have heard about computers on radio or b/w tv

@jippie didn't know NL got color TV so late ^^

@PlasmaHH You guys beat us by nearly a month

@Asmyldof does NL have SECAM, pal or NTSC?

We tried SECAM for a second, but quickly joined PAL

Never even thought of NTSC

I think ntsc got real Colors in the late 90s or so

Although, because we did have SECAM support in some devices, we may be one of the few countries that caused the cross compatibility in many more to follow

Still only Color, whereas we had actual Colour ;-)

I loved the first internet posts about "ripping" (then with Video tapes, of course)

"This card is completely useless, it turned my <whatever They Mailordered it from in the US> tapes all wobbly and flushed looking" with responses like "That's because you're trying to watch a signal that's primarily based on magic fairy dust with something that uses maths to make colour"

There may have been some patriotic engineering bias there ;-)

Which moron at MS decided to call it "Visual Studio 2013" and then call every single file that isn't the installer (whole new ballpark with their "call them all the same" policy) ???????10.dll ?

Umptillionth time I get customers contacting me "It said this DLL was missing, but we installed VS2010 Redist package and it still says that"

They didn't even have a PCB design

And since programmers want their kernel abstractions, you end up seeing 3 led and a motor type trinkets running a 32 bit arm just cuz

so guys tomorrow I'm starting at Dialog

whish me luck

@VladimirCravero speech therapy?

:P

what? I don't get it, sorry

little tired

Dialog sounds like the name of a speech therapy group

but hey, SoC is cool too

isn't it? :P

my boss will be out till next monday

I guess I'l just hang around and try every scope

Is it fabless?

@crasic You added too many s's on fables

:-P