Hmm.. I'm having a very interesting crypto problem.
Device A is capable of doing RSA_Encrypt() but not RSA_Decrypt() (also capable of doing AES_Encrypt() and AES_Decrypt())
While device B is capable of doing full crypto stuff (encrypt/decrypt with any algorithm)
So the restriction here is that A cannot do an RSA_Decrypt()
With the assumption that B has A's public key pinned in the provisioning process, can A and B establish a secure communication channel?
@Thomas @Codes Any thoughts?
My guess is yes. A can generate an AES key and use RSA_Encrpyt() to encrypt it and send it to B
Ugghhh.. Now that I wrote it down, I see the error in my logic. To encrypt, A needs to know B's public key. Since A cannot verify B's public key, this is vulnerable to MiTM.
@RoryAlsop well at the moment yeah if we need to find them that's the score. This I'm thinking would be more of a passive thing where it can tell by strength of signal how far away they are
so it would be static and say "at 4am I lost track of Tora" meaning he'd gone off down the village for a wander
TBH it's just a bit of fun to get used to how SDR works
'cause it sounds like an interesting area, and not one I've done anything with
@RoryAlsop yeah you can track planes with these things and all sorts. Apparently a dude managed to get direct info. from weather satellites using just one of those cheap dongles and a bit of wire for an antenna!
I was just informed of the StageFright vulnerability in Android devices.
A specially crafted MMS message can gain access to data on the phone; so presumably it's a buffer overflow with subsequent privilege escalation.
Details have not yet been disclosed, but the practical question is: how can ...
aside from a weaker security model - hey bugs happen, that's not so sucky! - this really shows how sucky android is precisely because of their distribution model.
that is probably Android's biggest vulnerability, and it is by design.
also that is really a slippery slope, as much as I hate the slippery slope argument
and PLS no comments about @Simon's mom being a slippery slope.
@RоryMcCune as I understand it, in US most devices have their updates controlled (aka blocked) by the telcos - who are not exactly "vendors" of the device
perhaps should be made illegal for telcos to block a device's updates?
@AviD yeah thus the need for a law. For telcos the re-certification is a sunk cost so they won't do it unless forced
for handset manu's they won't want to support anything over 18-24 months old, they want you to buy a new device
however the problem is that with slowing processor improvements, there's nothing really wrong with a lot of 2-4 year old devices apart from outdated software
so I'm testing this appllication, recently I adopted the habbit of asking what type of hashing algorithm they use for hashing passwords to the developers. I just get disapointed each time.
@JourneymanGeek We still have a full set of 'cockroach' phones (ie they will survive the apocalypse) and they are our essential travel/adventuring phones. They are rugged, battery life is a few weeks, and they just work everywhere
Oh, of only they know it was created here in the DMZ
Someone even came up with an alternative definition!
> "Ergo decedo" is an seldom-used title for a logical fallacy which amounts to substituting a personal insult for a logical response; in particular, telling the other speaker to go away.
@Arperum we use this com-spec.com/thecatlocator . Not the cheapest, but has let us find ours a couple of times that we might have lost 'em otherwise.. battery life is pretty good at one month on a watch battery and range is not bad (~1/4 mile with no obstructions)
the collars are also pretty small which avoids the problems of other ones I've seen which are really too big for cats
- Well, to be honest, my first response when my kids fall over is laughter. Or it was when they were little - and they'd look up and laugh too. Unless they had a very bad fall. Nowadays, with the stuff they do, all falls are likely to be bad, so I may not laugh as much
I even went so far as to get crash mats to put around the trampolines in the garden - as the stunts are getting quite powerful...
@AviD I told you the cheerleading club asked him to join, didn't I. They, up until now, have been an all girl club, using the gym after Hamish's acrobatics club, but decided they needed someone powerful to lift and throw them. He came home grinning. I asked him if he was going to join, and his response was effectively "Hell Yeah" :-)
@AviD well, there's always a bunch of "popularity" with the attacks. They aren't necessarily going for deep complex exploits, just those that will quickly embarrass the most folks
@RоryMcCune @ColinCassidy oo oo you should have a bit in your talk where you stick one of the switches in the middle of the floor and yell at it "YOU'RE DOOMED!!"
the year I went I had my burner all set up then some smegger released an 0-day in dhclient ... the one piece of software that would hit the network before my VPN kicked in..
so tell me. Why do otherwise-competent technology companies insist on herding independent knowledge workers across a commute just to shove them into a less-productive office? It makes no sense.
the benefits of collaboration are well overridden by loss of time and productivity, not to mention disadvantaged recruiting, even without considering that nowadays you can get almost the entire benefits through other, less artificial means
if they need me to commute over an hour each direction every damn day, and the office is not the playboy mansion or covered in fudge (or at least no less productive than my own office), then the "opportunity" gets dismissed immediately, with prejudice.
That's another thing that SEI got right, btw. Awesome offices, that are typically better than the alternative - but only as an option. Everything is set up for remote work.
@RoryAlsop OR
there are other possible improvements. Cubicles or shared open space is NOT one of them.
gotta post this here, it would snowball on space, but @RoryAlsop you might be interested in it... some just won't take yes for an answer LOL space.stackexchange.com/questions/4441/…
By default NMAP does reverse DNS resolution for a given IP which responds to the host discovery probes.
My question is, what are the benefits of getting the host name when performing a network scan?
reverse DNS lookups are handy on tests 'cause servers that host multiple sites will commonly not respond to the IP address and only to a valid host name
@ThomasPornin Yeah, I still haven't found a workable solution for the issue. A and B need to establish a secure channel to for A to send a 128-bit piece of information. A happens to have veeeeery limited processing power that a decrypt operation with RSA-1024 takes ~ 15 seconds, which is impractical for me.
@ThomasPornin On the other hand, the way that particular device was designed allows it to do AES very quickly. I just cannot think of a secure way that would also prevent MiTM
I was just informed of the StageFright vulnerability in Android devices.
A specially crafted MMS message can gain access to data on the phone; so presumably it's a buffer overflow with subsequent privilege escalation.
Details have not yet been disclosed, but the practical question is: how can ...
By default NMAP does reverse DNS resolution for a given IP which responds to the host discovery probes.
My question is, what are the benefits of getting the host name when performing a network scan?
