IRC log for #maemo on 20150219

00:25.04*** join/#maemo bef0rd (~bef0rd@unaffiliated/beford)
01:46.27*** join/#maemo auenf (David@171.72.233.220.static.exetel.com.au)
02:10.04*** join/#maemo vakkov (~vakkov@s3n105.brunel.ac.uk)
02:15.24*** join/#maemo Humpelst1lzchen (erik@d100184.adsl.hansenet.de)
02:23.55useretailhey there. how to view current sip login info located at /home/user/.signon/user_db.xml ?
02:49.22*** join/#maemo r00t|home (~r00t@port-92-196-46-165.dynamic.qsc.de)
02:57.27*** join/#maemo uhhimhere (~uhhimhere@1.9.98.148)
02:58.22*** join/#maemo robbiethe1st (~robbiethe@50.107.29.241)
02:59.23*** join/#maemo vakkov (~vakkov@134.83.207.29)
03:33.54*** join/#maemo maybeWTF (~cl@p5B162202.dip0.t-ipconnect.de)
03:36.09*** join/#maemo chem|st (~mayor@svn.unix-ag.uni-kl.de)
03:42.57*** join/#maemo hurrian (~hurrian@unaffiliated/rikanee)
04:00.50*** join/#maemo lxp (~lxp@unaffiliated/lxp)
04:01.58*** join/#maemo shamus (~shmaus@ip-206-192-193-180.marylandheights.ip.cablemo.net)
04:18.44*** join/#maemo shamus (~shmaus@ip-206-192-193-180.marylandheights.ip.cablemo.net)
05:01.10*** join/#maemo shamus (~shmaus@ip-206-192-193-180.marylandheights.ip.cablemo.net)
05:21.18*** join/#maemo shamus (~shmaus@ip-206-192-193-180.marylandheights.ip.cablemo.net)
05:26.07*** join/#maemo protem (~protem@unaffiliated/protem)
05:28.36*** join/#maemo shamus (~shmaus@ip-206-192-193-180.marylandheights.ip.cablemo.net)
05:33.00*** join/#maemo wnd (~wnd@katei.fi)
05:34.30Luke-JrFWIW, http://www.newegg.com/Product/Product.aspx?Item=0SC-001P-001D7 seems to be N900-compatible, although makes an annoying high-pitch noise.
05:34.49Luke-Jrposted a review on NewEgg (hasn't shown up yet) if more details are desired
05:53.20robbiethe1stI've used one of these, myself: http://www.ebay.com/itm/5V-1A-Mobile-Power-Supply-USB-Battery-Charger-18650-Box-for-Cell-Phone-MP3-MP4-/301529810728?pt=LH_DefaultDomain_0&hash=item463493c728 it charged my N950 with no problems, though I haven't tried my N900... IIRC, though, all you need is shorted D+ and D- for a full-current charge, right?
05:57.38Luke-Jrrobbiethe1st: I think so. Many USB chargers don't have that.
05:58.02robbiethe1stOne little blob of solder is all it takes... or a sharp knife and spare USB cable
05:58.12Luke-Jr☺
05:58.37Luke-Jrmy N900's internal battery lasts like 5-15 min now :<
05:59.06Luke-Jrhope the Pyra makes a good replacement soon
06:02.00robbiethe1stJust get a replacement cheapy?
06:02.08robbiethe1stThey tend to work decently, depending
06:03.42Luke-Jryeah, just hate to buy a new battery if I'm going to drop the N900 soon anyway
06:03.52Luke-Jrhence the external battery pack
06:08.31KotCzarnyoriginal nokia batteries are worth their price
06:09.05KotCzarnycheapo chinese ones are good only when you want to sell the device claiming 'new battery onboard'
06:09.23Luke-JrKotCzarny: yeah, the hard part would be identifying the originals :P
06:09.59robbiethe1stBy now, I'm not sure about the original nokia batteries; they're years old by now
06:10.01KotCzarnyluke: price? ;)
06:10.08robbiethe1stUnless they've been in the freezer for a few years...
06:10.19KotCzarnywell, good point
06:10.56KotCzarnystill, anything less than 10eur isnt gonna last long
06:11.50KotCzarnyyou might want mugen cover or similar and dual battery (or double capacity one)
06:13.16Luke-Jrwait, Nokia doesn't use the same batteries in new phones? :/
06:13.30robbiethe1stI don't know. it depends on the size
06:14.12robbiethe1stN950 had a different battery than N900(wider, but a N900 one would fit with a little plastic trimming), and I'm not sure what new dumbphones nokia is selling
06:14.16KotCzarnynokia 520 uses bl-5j
06:14.18KotCzarnyfor example
06:14.59*** join/#maemo hurrian (~hurrian@unaffiliated/rikanee)
06:15.44*** join/#maemo bef0rd (~bef0rd@unaffiliated/beford)
06:15.53KotCzarnyhttp://www.cpkb.org/wiki/Nokia_BL-5J_battery
06:16.00KotCzarnyand nokia asha 200/201/302
06:16.38*** join/#maemo ceene (~aaaaaa@collins.gmr.ssr.upm.es)
06:16.47KotCzarnybut as i said, if you dont mind bulky device and want extended capacity, grab extended cover and extended battery
06:18.27KotCzarnyhttp://talk.maemo.org/showthread.php?t=46987
06:18.30KotCzarny:)
06:24.52KotCzarnyas for charger argument tho, my battery stil has ~1329mAh even after continuous use for 6 years by now
06:37.34Luke-Jreh, mine reports 1221mAh at full
06:37.41Luke-Jrbut once it gets to like 900, it just dis
06:37.43Luke-Jrdes
06:37.44Luke-Jrdies*
06:37.58Luke-Jr(and gets there pretty quick)
06:53.41KotCzarnyluke: is it original one?
07:03.07*** join/#maemo LauRoman|Alt (~LauRoman@5-14-0-49.residential.rdsnet.ro)
07:03.25Luke-JrKotCzarny: I presume so, I got it in an unused N900 I bought off some guy on craigslist
07:03.36Luke-Jrmy original original inflated like a balloon
07:03.42KotCzarnymight have physical damage inside
07:04.07KotCzarnyi suggest replacing because it has higher danger of fatal failure
07:04.20Luke-Jrfatal to what?
07:05.34KotCzarnyhttp://www.techlicious.com/blog/the-risk-of-exploding-lithium-ion-batteries/
07:07.44KotCzarnyhttp://electronics.howstuffworks.com/everyday-tech/lithium-ion-battery2.htm
07:08.09KotCzarnyhere is more detailed process why do they explode
07:08.20Luke-Jrfirefox sucks too much, can you summarise? :x
07:08.51KotCzarnythe battery inside has insulator
07:09.15KotCzarnywhen crystals grow or there happens physical damage to it, it can cause short
07:09.46KotCzarnyshort means high discharge => high temperature => when it gets ignited, BOOM
07:12.32*** join/#maemo eijk (~eijk@e178198018.adsl.alicedsl.de)
07:13.16*** join/#maemo _rd (~rd@p4FD1D7CE.dip0.t-ipconnect.de)
07:17.20Luke-Jrso where's a reliable source for a cheap battery that won't explode? :p
07:17.46KotCzarnywell, fatal failures are rare
07:18.03KotCzarnybut you've said your battery is inflated already
07:18.10Luke-JrI'd prefer not to get hospitalised even if I live
07:18.15Luke-Jrthat's my old battery
07:18.18Luke-Jrnot the current one
07:18.24KotCzarnythen it's ok
07:18.28Luke-Jrok
07:21.54*** join/#maemo Haudegen (~quassel@85.124.51.57)
07:22.53*** join/#maemo mavhc (~mavhc@cpc12-basf8-2-0-cust10.12-3.cable.virginm.net)
07:37.33*** join/#maemo MohammadAG (~MohammadA@Maemo/community/contributor/MohammadAG)
07:38.55*** join/#maemo mavhc (~mavhc@cpc12-basf8-2-0-cust10.12-3.cable.virginm.net)
07:51.28*** join/#maemo erlehmann (~erlehmann@e180179103.adsl.alicedsl.de)
07:56.57*** join/#maemo _rd (~rd@p4FD1D7CE.dip0.t-ipconnect.de)
08:14.11*** join/#maemo heroux (sandroco@gateway/shell/insomnia247/x-jkdbifcvisfmpeca)
08:16.50*** join/#maemo futpib (~futpib@176.104.193.185)
08:21.53*** join/#maemo _rd (~rd@p4FD1D7CE.dip0.t-ipconnect.de)
08:23.49*** join/#maemo florian (~fuchs@Maemo/community/contributor/florian)
08:24.19*** join/#maemo futpib (~futpib@176.104.193.185)
08:31.59*** join/#maemo arcean (~arcean@aacx39.neoplus.adsl.tpnet.pl)
08:33.50*** join/#maemo xorly (~xorly@m180.dkm.cz)
09:13.19*** join/#maemo N-Mi (~nicolas@calvix/staff/N-Mi)
09:19.57bencohLuke-Jr: I bought a polarcell from amazon (Europe)
09:20.14bencoh(a few weeks ago)
09:20.49kerioorange chinese battery > polarcell
09:21.37bencohreally ?
09:21.41*** join/#maemo _rd (~rd@p4FD1D7CE.dip0.t-ipconnect.de)
09:26.43*** join/#maemo Kabouik (~quassel@147.99.218.243)
09:29.07KotCzarnygreat
09:29.23KotCzarnyzziplib fails when i close(0,1,2) ehehe
09:29.53KotCzarnymaybe i should just open /dev/null as a dummy fd-0 and keep it that way
09:30.19bencohread nohup
09:30.46KotCzarnynah, i'll just take fd-0 out of the available pool
09:31.00KotCzarnyi dont want to rely on some external util
09:31.06KotCzarnyif i can code workaround
09:31.32kerioyeah i think you can't expect to close stdio and have everything working
09:31.43kerioopen /dev/null on all three i guess
09:32.02kerioEOF when reading stdin is to be expected, and output will always work
09:32.04KotCzarnykerio: i could, but there are code which checks for fd being >0 instead of >=
09:32.22KotCzarnykerio: im not using stdin when my app is daemonized
09:32.31kerioyeah but
09:32.42KotCzarnyand it works, but some libs aren't bug free apparently
09:32.49kerioEOF is better than reading some other file
09:32.55kerio:)
09:33.07KotCzarnyand no, zziplib doesn't need stdin in my use case
09:33.12kerioand yet
09:33.40KotCzarnyi think you arent' understanding  situation
09:34.03keriooic, it refuses to work because it thinks some other file is stdin
09:34.15kerioor doesn't work properly i guess
09:35.07KotCzarnyno, it fails because it has internal check for fd being >0, but when stdin is unneeded and closed, lib can assing fd-0 to anything (socket, file)
09:35.32KotCzarnyonly fd<0 guarantees that open failed
09:35.56kerioyeah yeah i understood that
09:36.13keriomeh, i'd still keep some dummy file descriptors on 0, 1 and 2
09:36.22KotCzarnythat's what im going to do
09:43.31*** join/#maemo robink (~quassel@unaffilated/robink)
09:46.39erlehmannnaba kumar is alive
09:46.47KotCzarnyand kicking?
09:47.47*** join/#maemo Kabouik_ (~quassel@147.99.221.195)
09:48.23*** join/#maemo mavhc (~mavhc@cpc12-basf8-2-0-cust10.12-3.cable.virginm.net)
09:50.49*** join/#maemo mhlavink (quassel@nat/redhat/x-kblmrejcdivahtyh)
09:54.12KotCzarnythe heck
09:54.18KotCzarnyit's something else
09:54.43erlehmannwhat
09:54.55erlehmannnaba kumar wrote:
09:55.04KotCzarnyjust wtfing the bug i stumbled upon in code
09:55.05erlehmann<PROTECTED>
09:55.06erlehmann<PROTECTED>
09:55.06erlehmann<PROTECTED>
09:55.06erlehmann<PROTECTED>
10:07.24*** join/#maemo tg (~x@unaffiliated/tg)
10:15.43Sicelologging what?
10:19.43*** join/#maemo ruskie (ruskie@sourcemage/mage/ruskie)
10:22.20*** join/#maemo Pali (~pali@Maemo/community/contributor/Pali)
10:24.32KotCzarnyhrm, it's definitely about closing fd-0
10:24.49KotCzarnybut fake-file-with-fd0 doesnt work as expected
10:27.08KotCzarnylol. i had to use /dev/zero instead of /dev/null
10:30.14*** join/#maemo ruskie (ruskie@sourcemage/mage/ruskie)
10:30.18KotCzarnyugly.
10:51.26KotCzarnyum-kay. uploaded new builds of oscp and remote
11:00.14*** join/#maemo Haudegen (~quassel@85.124.51.57)
11:15.55kerioKotCzarny: wait, what
11:15.59*** join/#maemo hubutm20 (~hubutm20@79.114.75.238)
11:16.02keriothat *has* side effects
11:21.30*** join/#maemo jonwil (~jonwil@27-33-80-219.tpgi.com.au)
11:28.31KotCzarnykerio: hmm?
11:28.44kerio/dev/zero returns zeroes
11:28.49kerioit might not be what you want
11:29.01KotCzarnytested already and does what i need
11:29.13KotCzarnyno side effects in my codebase
11:30.29*** join/#maemo stef204 (~kvirc@unaffiliated/stef-204/x-384198)
11:40.33*** join/#maemo ruskie (ruskie@sourcemage/mage/ruskie)
11:40.44*** join/#maemo robink (~quassel@unaffilated/robink)
11:49.54*** join/#maemo Natch (~Natch@h-155-122.a444.priv.bahnhof.se)
11:57.17KotCzarnyhrm. now oss mixer stopped working on n800
11:57.19KotCzarnyo.o
12:05.06*** join/#maemo lizardo_away (lizardo@nat/indt/x-cnqovtwkblqhhjfu)
12:31.50*** join/#maemo eijk (~eijk@e178198018.adsl.alicedsl.de)
12:36.25*** join/#maemo eMHa_ (~mh@nat.de.netviewer.com)
12:45.32*** join/#maemo frals (~frals@h-27-242.a328.priv.bahnhof.se)
12:45.32*** join/#maemo frals (~frals@Maemo/community/contributor/frals)
12:51.00*** join/#maemo frals (~frals@Maemo/community/contributor/frals)
12:51.21*** join/#maemo sunny_s (~sunny_s@pd95c1f18.dip0.t-ipconnect.de)
13:07.08*** join/#maemo obsed (~obesd@unaffiliated/obesd)
13:09.16KotCzarnyfrigginfragginmaemo4ossmixerignoringpropertag
13:51.00*** join/#maemo robink (~quassel@unaffilated/robink)
13:54.22*** join/#maemo shamus (~shmaus@ip-206-192-193-180.marylandheights.ip.cablemo.net)
14:04.08*** join/#maemo FlameReaper (~assassin@12.192.48.60.klj02-home.tm.net.my)
14:08.29*** join/#maemo stryngs (~stryngs@unaffiliated/stryngs)
14:14.23*** join/#maemo xorly (~xorly@147.32.187.226)
14:19.46*** join/#maemo shamus (~shmaus@ip-206-192-193-180.marylandheights.ip.cablemo.net)
14:28.58*** join/#maemo robink (~quassel@unaffilated/robink)
14:29.16*** join/#maemo b1101 (~b@fsf/member/b1101)
14:35.45*** join/#maemo b1101 (~b@fsf/member/b1101)
14:39.51*** join/#maemo konelix__ (~konelix@190.106.210.26)
14:47.19KotCzarnyanyone knows how can i bind hardware keys on n900?
14:47.25KotCzarnyin pygtk/python preferably
14:47.59*** join/#maemo ssvb (~ssvb@85-76-116-134-nat.elisa-mobile.fi)
14:49.08*** join/#maemo uhhimhere (~uhhimhere@jrc-52-79.tm.net.my)
14:53.01stryngsKotCzarny: bind keys?
14:53.07stryngslike keyboard remapping?
14:53.11KotCzarnywell, use
14:53.21KotCzarnyright now they trigger volume up/down
14:53.33KotCzarnyhow can i bind them to the active pygtk window
14:53.54keriobind on F6/F7
14:54.05kerioi think
14:54.14KotCzarnykerio: pygtk doesnt show anything
14:54.23KotCzarnyi have a catch-all routine
14:54.45stryngsKotCzarny: one moment
14:54.53KotCzarnyon n800 they send f6/f7 as you suggest (i think)
14:55.01KotCzarnybut on n900 they don't reach the program
14:55.09KotCzarnyi've found one solution for c
14:55.23KotCzarnybut none pythonishish
14:55.37stryngsKotCzarny: I'm not usre if this is what u are looking for but try: http://ethicalreporting.org/pwn/repo/pool/main/p/pwnphone-keyboard/pwnphone-keyboard_1.0.2_armel.deb
14:55.43stryngsDon't dpkg -i it
14:55.46stryngsbut dpkg -x it
14:55.50stryngsand check out what it does
14:55.52stryngsperhaps it will help
14:56.53KotCzarnyit remaps keys
14:56.56KotCzarnysystem wide
14:58.02stryngsyes
14:58.06KotCzarnyhttp://doc.qt.digia.com/qt-maemo-4.7/maemo5-zoom.html
14:58.09KotCzarnyit's c-way
14:58.41stryngsOh
14:58.44stryngskeybinding for guis
14:58.45stryngsgotcha
14:58.53stryngswell, perhaps the .deb can help somehow =)
14:58.56stryngscheckitout =)
14:59.12KotCzarnynah, its about sending x11/hildon a message
14:59.17KotCzarnythat i need those keys
14:59.20keriothat's qt tho, isn't it
14:59.26KotCzarnykerio: it's c
14:59.38kerioyes but
14:59.39KotCzarnysee grabZoomKeys()
14:59.39kerioit's qt
14:59.46KotCzarnyrest doesnt matter
14:59.56keriooh it's just x11 stuff
14:59.57keriook
15:00.26KotCzarnyi just need to find a way to do it without needing external binaries
15:02.46keriowell, i mean
15:02.54kerioif you *really* must, you can use ctypes
15:03.05KotCzarnyin python?
15:03.14kerioyes
15:03.28KotCzarnyhttp://talk.maemo.org/showthread.php?t=58503
15:03.29keriobut that's pretty much the same as an external binary, really
15:03.35KotCzarnyhah. gonna try this one
15:04.11KotCzarnyit will suck a bit because of dependency on import hildon; but.
15:04.42KotCzarnyi have two oscp binaries for n900, i might as well add oscp-remote-n900
15:05.44KotCzarnywonder what happened to qwerty12
15:11.16KotCzarnyit's.. working
15:11.18KotCzarnyO.o
15:12.35*** join/#maemo robink (~quassel@unaffilated/robink)
15:14.34KotCzarnyit's wooooorking.. muahahahahha
15:22.07Paliyes, you need to use _HILDON_ZOOM_KEY_ATOM Xlib atom
15:22.26Palithis is way how to grab zoom keys
15:22.53stryngsPali, is there any reason not to use the kernel for 3.10.0?
15:23.12Paliyes, upstream kernel does not have needed HW support
15:23.14stryngshttps://gitorious.org/linux-n900/linux-n900/
15:23.17stryngsAh
15:23.24Palisee http://elinux.org/N900
15:23.25stryngsSo the defconfig is missing stuff =(
15:23.33stryngsspecifically BPF
15:23.54Palilinux-n900 is that our git repo for mainlining...
15:23.55stryngs<PROTECTED>
15:24.05stryngsand...
15:24.10stryngsCONFIG_NETFILTER_XT_MATCH_BPF
15:24.13jogahmm... I don't have the issue on my n900, but my gf's one (running cssu) for some reason can't connect to internet if "GSM" is selected, but "3G" works. might this be related to some internet setting on it, the sim card, or provider? we have the same provider (but I have a more beefy data plan)
15:24.17stryngsthose are the two needed I believe
15:25.04Palistryngs: looks like this was added to linux kernel 3.9
15:25.16stryngsRight, so what can I do to aid the process?
15:25.21stryngsIf anything... =/
15:25.29Paliyou cannot use it on maemo
15:25.37stryngsdamn
15:25.38Palithats all
15:25.49stryngsSo it's official.  Scapy i truly broken for the n900
15:25.54stryngsWell, that clears that up =)
15:26.04Paliyou can use u32 netfilter module
15:26.07stryngsWill we be able to use it ever?
15:26.13stryngsu32 netfilter.. hmm
15:26.15stryngswith scapy?
15:26.22stryngsor in general for filtering bpf style
15:26.36Palithat can match any packet and with mark module you can see it via netfilter in userspace
15:26.45Paliit is alternative solution for bpf
15:26.57stryngsInteresting
15:27.10stryngsI will notate that and continue on =)  Thank you very much for the help Pali
15:27.25*** join/#maemo SmilyOrg (~Smily@93-103-71-218.dynamic.t-2.net)
15:27.25stryngsAt least now I can stop recompiling python thinking perhaps it's python that is the issue
15:27.36Paliyou need to understand how linux iptables and netfilter is working
15:27.50Paliand then you should be able to do anything what you want
15:27.53stryngsWell, this is more of a monitor mode packet injection thing than anything
15:27.58stryngshence, iptables won't help
15:28.08stryngsI want to bring airpwn to the n900
15:28.44stryngsBut, for MITM stuff, I will remember that.  u32 netfilter
15:28.44PaliI think you should be able to use netfilter also on lower level
15:29.32PaliI know that with u32 module I was able to match basically any ipv4 packet (just need to specify correct format for u32)
15:29.59stryngsSo you were able to (pseudocode here..):
15:30.20stryngsgrep for any packet that is issuing a GET / request and sniff the seq and ack and len?
15:30.44Paliuffff, matching TCP data is not simple with u32
15:30.54stryngsAh, see that'
15:30.59stryngss what i'm trying to do =)
15:31.01Palibut I think it could be possible
15:31.12stryngsI'll prolly have to go with the kernel thing, i forget what it's called
15:31.17stryngslistens for an action and then acts on it
15:31.24Palikerio: what do ou think?
15:31.25stryngsmake it a tcp trigger
15:31.35stryngswhen it detects x in tcpdump it does y
15:32.14Paliman iptables: "U32 tests whether quantities of up to 4 bytes extracted from a packet have specified values. The specification of what to extract is general enough to find data at given offsets from tcp headers or payloads."
15:32.34kerioPali: looks neat
15:32.45stryngsbam, there it is
15:33.00Palikerio: it is possible to extract GET request from packet via iptables/u32?
15:33.16kerio...oh god
15:33.17PaliI think it should be, but I have never done it
15:33.43kerioisn't GET like one of the latest packets in a http request?
15:33.50kerioalso, i think U32 wants exact offsets
15:35.00PaliI think you can use indirect offset too...
15:35.10keriowhat's the plan?
15:35.28keriomark a certain http request to analyze it with userland tools?
15:35.52Palito use iptables/u32/netfilter instead bpf (because it is not supported in prior 3.9 kernel)
15:36.16Palistryngs: what exacly you want to do?
15:37.10keriooh, the fucking script kid
15:37.15*** join/#maemo stryngs (~stryngs@172.56.32.115)
15:43.25*** join/#maemo RedM (~redw@89-73-179-171.dynamic.chello.pl)
15:44.40*** join/#maemo shamus (~shmaus@ip-206-192-193-180.marylandheights.ip.cablemo.net)
15:49.42*** join/#maemo Luke-Jr (~luke-jr@unaffiliated/luke-jr)
16:26.35*** join/#maemo stryngs_ (~stryngs@unaffiliated/stryngs)
16:45.46KotCzarnystryngs: if you only need mangling http traffic, why not use transparent proxy ?
16:46.00KotCzarnywith iptables redirect
17:04.21stryngs_KotCzarny: Monitor Mode
17:04.28stryngs_KotCzarny: I'm not doing MITM
17:04.35KotCzarnyhmm
17:04.39stryngs_I'm leveraging this against my ebay vulnerability
17:04.43stryngs_Developing a new tool
17:04.48stryngs_Going to force the industry to change
17:04.56stryngs_And I'm going to do it with the n900 as a PoC
17:05.11KotCzarnybut in monitor mode you are only receiving
17:05.27stryngs_When I can take my phone into a building, bang a command out and steal whatever I want cookie wise, it's game on for the industry
17:05.38stryngs_Well, monitor mode allows for packet injection KotCzarny on the n900
17:06.21KotCzarnyso, you are only stealing cookies from lans
17:06.31stryngs_No
17:06.39stryngs_I'm going to hijack any cookie i want
17:06.49stryngs_So long as you're on open wifi or wifi with a password I know
17:06.51stryngs_I will own you
17:06.57stryngs_Because the industry SUCKS at securing their damn cookies
17:07.00stryngs_I intend to change it
17:07.05KotCzarnyif you are on the wifi you can connect, its lan
17:07.06stryngs_google: ebay session hijack to see what i mean
17:07.14stryngs_Dude, I dont need to be on the wifi
17:07.15stryngs_MONITOR MODE
17:07.28stryngs_I need to be within 44 mHz of your channel
17:07.29stryngs_That's it
17:07.36bencoh18:06 < stryngs_> So long as you're on open wifi or wifi with a password I know
17:07.36bencoh18:06 < stryngs_> I will own you
17:07.38bencohhmm
17:08.02stryngs_KotCzarny: See http://www.youtube.com/watch?v=NXdHT6TpeFk
17:08.09KotCzarnyif network is encrypted (wpa) you are not going to steal cookies
17:08.10stryngs_I go indepth as to why the industry needs to change
17:08.10bencohit's easy on an open wifi
17:08.39bencohbut on a "secured" wifi you need to sniff the handshake/auth between the base and the client
17:08.57stryngs_No its not easy bencoh
17:09.00stryngs_Not what i'm doing
17:09.11stryngs_I wish it were =)
17:09.33bencohwhat do you mean by "open wifi" then ?
17:09.34stryngs_And KotCzarny what I speak of is OPEN wifi, aka, starbucks
17:09.41stryngs_802.11 with no encryption
17:09.52*** join/#maemo protem (~protem@unaffiliated/protem)
17:09.54bencohwhat's the issue then ?
17:09.56stryngs_All I need to do is inject a simple iframe and it's game over on a GET request
17:10.02stryngs_watch my video bencoh
17:10.04stryngs_You'll see
17:10.05stryngs_=)
17:10.15stryngs_And yes, this tool will be available on the n900
17:10.33bencohaww, I hate watching videos on that kind of stuff :)
17:10.42stryngs_hehe
17:10.44stryngs_skip to 23:23 then
17:10.46bencoh:)
17:10.53stryngs_ngrep is a ninja tool bud =)
17:10.59stryngs_ngrep with some mon0 action = pwnage
17:11.07stryngs_throw in a lil iframage and they're done
17:11.27bencohdid you check dsniff ? :)
17:11.39stryngs_dsniff is for managed mode or eth0
17:11.40bencohthat's a really old one but not too far from what you're doing
17:11.48stryngs_very far off actually =)
17:11.52stryngs_I'm not MITM at all
17:11.57stryngs_I'm simply injecting an iframe
17:11.59bencohdsniff doesnt do any MITM
17:12.10stryngs_right, but it doesnt inject only sniffs
17:12.14bencohyup
17:12.17stryngs_ngrep > dsniff
17:12.25stryngs_and ferret is perfect
17:12.30stryngs_ferret parses the cookie for me
17:12.41stryngs_Dug Song is a wonderful coder though, don't get me wrong!
17:13.52stryngs_My main thing is all my tools revolve arounbd the n900 =)
17:14.03stryngs_Why?  It's portable and concealable more than a laptop or tablet with a dongle
17:14.10stryngs_People assume i'm texting on it
17:14.18stryngs_At a pentest with a tablet and dongles, they assume the worst
17:14.29stryngs_Hence why the Original PwnPhone from pwnieexpress rocks and rolls =)
17:14.31stryngs_viva la n900
17:14.36*** join/#maemo shamus (~shmaus@ip-206-192-193-180.marylandheights.ip.cablemo.net)
17:21.37KotCzarnybut how do you inject when you are on monitor mode
17:22.02KotCzarnyalso, open network in starbuck == lan
17:22.15KotCzarnyand people using private stuff there are just.. stupid
17:23.16KotCzarnyit's not about changing industry, if someone is stupid enough to use public networks for anything more than checking info, nothing is going to help them
17:28.55stryngs_Heh
17:29.02stryngs_KotCzarny is way off base,
17:29.09*** join/#maemo KotCzarny (~ariel@agja172.neoplus.adsl.tpnet.pl)
17:29.18stryngs_KotCzarny: I'm glad you came back
17:29.21stryngs_Time for some school.
17:29.30stryngs_KotCzarny: Do you logoff EVERY website every time>
17:29.31stryngs_?
17:29.32KotCzarnyif you give them false sense of security, someone will find the next bug
17:29.50KotCzarnystryngs: sometimes, but i dont treat network as secure
17:30.02stryngs_Ok thats fine, so if its https your happy right?
17:30.07KotCzarnynope
17:30.17KotCzarnyi know https can be cracked
17:30.20stryngs_Ok, I'm gunna break u dude.  Let's say yer on your own damn network
17:30.25stryngs_Do u do online banking?
17:30.26stryngs_Ebay
17:30.27stryngs_Facebook
17:30.28stryngs_etc..
17:30.32stryngs_On your own network
17:30.44bencoh(no fb, it's bad for your brain :°)
17:30.59KotCzarnystryngs: stop caring too much about it: http://www.techamok.com/?pid=15162
17:31.01stryngs_Stop looking at this from a pessimistic point of view.  You obviously had no idea until now that this was possible, so roll with me
17:31.02KotCzarnynsa has you
17:31.06KotCzarnymore than you can imagine
17:31.16stryngs_Considering I work with them, i dont care
17:31.18KotCzarnyit can hack you even when you are OFFLINE
17:31.41KotCzarnyso can mobsters probably
17:31.50stryngs_So do u want to learn what i am talking of KotCzarny ?  I'll teach u this approach if u want, but im not gunna force it down your thorat
17:32.03bencohthey can certainly "hack" you in the strictest sense :p
17:32.07KotCzarnynah, i don't care
17:32.15stryngs_Ok then.
17:32.15KotCzarnyi know network is crackable
17:32.17KotCzarnymultiple ways
17:32.31KotCzarnyit's people that need to change
17:32.35KotCzarnynot the tech
17:32.38stryngs_Dude, you have no idea.  And you definately do not grasp what i'm talking about since you keep blathering on about people needing to chaneg
17:32.43stryngs_ITS THE FUCKIN TECH that is broken
17:32.46KotCzarnynope
17:32.47stryngs_stop sayin its the people
17:32.49KotCzarnyit's people
17:32.55bencohI'd say both :)
17:32.58KotCzarnyif there is no one going to bad things to you
17:33.06KotCzarnyyou wont be needing encryption
17:33.07stryngs_People are stupid, but when u have sites like ebay using cookies with no secure flag nor httponly flag, then its the damn tech
17:33.08*** join/#maemo vakkov (~vakkov@s3n105.brunel.ac.uk)
17:33.13*** join/#maemo florian (~fuchs@Maemo/community/contributor/florian)
17:33.24stryngs_And u saying it's the people just burns me up!
17:33.30KotCzarnyyup
17:33.44stryngs_>>>>>> People are stupid, but when u have sites like ebay using cookies with no secure flag nor httponly flag, then its the damn tech <<<<<<<
17:33.55KotCzarnyin some places when there is no cashier, people just leave money on the counter and go
17:34.09KotCzarnyin most places people will just steal in such case
17:34.28KotCzarnyso no, it's not the tech that is the problem but people's attitude and morals
17:34.41KotCzarnyif there are no thieves, there would be no need for locks
17:35.10KotCzarnyif you start locking things up, bad people will open them without your consent sooner or later
17:35.39KotCzarnyin the first case, you have no stress
17:35.45*** join/#maemo arist0v-work (~arist0v-w@unaffiliated/arist0v)
17:35.50KotCzarnyin the second, you live in constant fear
17:35.56KotCzarny(or false sense of security)
17:36.19KotCzarnyyou patch one hole, bunch of 0day ones crop up next month
17:38.32bencoh:)
17:38.49stryngs_pokes arist0v-work
17:39.04arist0v-workhey don't poke me stryngs_ i just eat.....
17:39.15stryngs_haha
17:46.55*** join/#maemo sq-one (~sq-one@HSI-KBW-109-193-055-047.hsi7.kabel-badenwuerttemberg.de)
17:58.11*** part/#maemo arist0v-work (~arist0v-w@unaffiliated/arist0v)
18:01.29*** join/#maemo vakkov (~vakkov@s3n105.brunel.ac.uk)
18:02.27*** join/#maemo protem` (~protem@unaffiliated/protem)
18:05.37KotCzarnystryngs: pic related: http://i.imgur.com/5nClv.jpg
18:10.25*** join/#maemo qt_junkie (~qt_junkie@5.175.138.65)
18:12.02*** join/#maemo vakkov (~vakkov@s3n105.brunel.ac.uk)
18:23.47*** join/#maemo florian (~fuchs@Maemo/community/contributor/florian)
18:34.07*** join/#maemo fortytwo (~thomas@who.let.this.bloody.dropbear.in)
18:35.10*** join/#maemo M4rtinK (~M4rtinK@ip-37-188-137-242.eurotel.cz)
19:00.08*** join/#maemo erlehmann (~erlehmann@89.15.237.69)
19:08.12*** join/#maemo sparetire (~sparetire@unaffiliated/sparetire)
19:09.40*** join/#maemo RedW (~redw@89-73-179-171.dynamic.chello.pl)
19:10.01*** join/#maemo Kabouik (~quassel@65.76.93.92.rev.sfr.net)
19:10.43*** join/#maemo vakkov (~vakkov@134.83.207.29)
19:21.01*** join/#maemo Haudegen (~quassel@85.124.51.57)
19:21.58*** join/#maemo Dynamit (~Mohamed@84-55-71-67.customers.ownit.se)
19:36.48*** join/#maemo shamus (~shmaus@ip-206-192-193-180.marylandheights.ip.cablemo.net)
19:38.31*** join/#maemo brutal_ (~Brutal@5.18.76.121)
19:43.05*** join/#maemo shentey (~shentey@g225073008.adsl.alicedsl.de)
19:52.32*** join/#maemo florian (~fuchs@Maemo/community/contributor/florian)
19:55.48*** join/#maemo erlehmann (~erlehmann@89.204.137.34)
20:12.02*** join/#maemo RP_ (~richard@5751ab90.skybroadband.com)
20:13.22Sicelomybb
20:18.57*** join/#maemo RP_ (~richard@5751ab90.skybroadband.com)
20:34.46*** join/#maemo ArGGu^^ (~ArGGu^^@89.106.52.253)
20:42.09*** join/#maemo shamus (~shmaus@ip-206-192-193-180.marylandheights.ip.cablemo.net)
20:45.49*** join/#maemo Luke-Jr (~luke-jr@unaffiliated/luke-jr)
20:50.52*** join/#maemo Clark44 (uid3845@gateway/web/irccloud.com/x-qylblmxqojaqlbpq)
21:02.22*** join/#maemo shamus (~shmaus@ip-206-192-193-180.marylandheights.ip.cablemo.net)
21:10.39*** join/#maemo RiD (Ghost@bl17-226-19.dsl.telepac.pt)
21:28.36*** join/#maemo eijk_ (~eijk@e178201194.adsl.alicedsl.de)
21:29.24*** join/#maemo shamus (~shmaus@ip-206-192-193-180.marylandheights.ip.cablemo.net)
21:32.53*** join/#maemo eMHa_ (~mh@p4FDB6961.dip0.t-ipconnect.de)
21:44.15stryngs_Can someone please do: head -n 30 /usr/include/linux/if_arp.h | nc termbin.com 9999
21:44.21stryngs_Please and thank you post the URL =)
21:46.46stryngs_nvm
21:46.46stryngs_=)
21:54.42*** join/#maemo M4rtinK (~M4rtinK@mail.melf.eu)
22:06.08*** join/#maemo _rd (~rd@p4FD1D7CE.dip0.t-ipconnect.de)
22:19.07*** join/#maemo SpeedEvil (~quassel@tor/regular/SpeedEvil)
22:23.00*** join/#maemo Neutron (~neutron@17.92-220-157.customer.lyse.net)
22:50.51*** join/#maemo shamus (~shmaus@ip-206-192-193-180.marylandheights.ip.cablemo.net)
22:54.25*** join/#maemo florian (~fuchs@Maemo/community/contributor/florian)
23:05.54*** join/#maemo mavhc (~mavhc@cpc12-basf8-2-0-cust10.12-3.cable.virginm.net)
23:06.32*** join/#maemo phlixi (~phlixi@ppp-212-114-183-87.dynamic.mnet-online.de)
23:16.25*** join/#maemo infobot (ibot@rikers.org)
23:16.25*** topic/#maemo is Welcome to #maemo http://maemo.org/intro/ | N9/harmattan related questions please in #harmattan ! | "firmware" see ~tabletsdev ~combined ~emmc ~flasher sdk: ~sb | http://wiki.maemo.org/Community_Council | Source: http://wiki.maemo.org/Sources | Chanlog: http://mg.pov.lt/maemo-irclog | #maemo-ssu is where the (few) devels and maintainers of the maemo-future meet
23:51.21*** join/#maemo bef0rd (~bef0rd@unaffiliated/beford)

Generated by irclog2html.pl Modified by Tim Riker to work with infobot.