| 00:00.40 | *** join/#openezx jonwil (n=jonwil@CPE-124-182-54-182.sa.bigpond.net.au) |
| 00:01.07 | jonwil | hi |
| 00:02.05 | ao2 | it's 1 am here, good night folks |
| 00:02.28 | jonwil | cya |
| 00:07.33 | jonwil | anyone here know anything about kernel module programming? |
| 00:34.33 | WyrM | jonwil: probably 50% of the people present on the channel. ;) |
| 00:51.46 | jonwil | heh, I need someone to help me write a kernel module |
| 01:12.34 | jonwil | The more I work on this, the more I think no-one cares about motomagx |
| 01:14.58 | WyrM | jonwil: just read your mail to the ML. |
| 01:15.20 | WyrM | what asheesh says is true, you dont need a kernel module to do what you want. |
| 01:15.37 | jonwil | the z6 doesnt have /dev/ram |
| 01:15.44 | jonwil | and so far I have been unable to get it to work |
| 01:15.49 | WyrM | you can just mmap /dev/mem and do anything you want. |
| 01:16.01 | jonwil | no /dev/mm |
| 01:16.03 | jonwil | mem |
| 01:16.09 | WyrM | oh. |
| 01:16.09 | jonwil | there is no memory device at all on the z6 |
| 01:16.28 | jonwil | hence my problem |
| 01:16.29 | WyrM | and you already tried to mknod it, i remember. |
| 01:16.36 | jonwil | yes |
| 01:16.51 | WyrM | what do you want to read? flash? ram? |
| 01:17.46 | jonwil | blocks of memory |
| 01:17.55 | jonwil | I have memory addresses |
| 01:18.00 | jonwil | as visible to the kernel |
| 01:18.33 | jonwil | Its not the main flash (which is NAND flash and only accessible through i/o registers) |
| 01:18.33 | WyrM | what kind of memory? |
| 01:18.39 | jonwil | I think its RAM |
| 01:18.53 | WyrM | hum.. |
| 01:19.01 | jonwil | although some of it might be bootstrap NOR flash or ROM stored on the SCMA11 chipset |
| 01:20.19 | jonwil | either way, I have kernel memory addresses and in theory should be able to read stuff out from those addresses |
| 01:20.44 | WyrM | but.. can you load a module? :) |
| 01:21.04 | jonwil | yes we can |
| 01:21.19 | jonwil | I have been able to rmmod and insmod kernel modules no problems |
| 01:21.36 | jonwil | that is, kernel modules already on the phone |
| 01:21.44 | jonwil | the only missing bit is writing the new module to do what we need |
| 01:23.41 | WyrM | jonwil: try to make a copy of a module that works, change a random string inside it and try to insmod it. |
| 01:24.27 | WyrM | if this works, i will write the module for you. |
| 01:29.32 | jonwil | ok, I took motsecurity_sysfs.ko from the phone, renamed it to motsecuritx_sysfs.ko and edited instances in the file of motsecurity_sysfs to motsecuritx_sysfs |
| 01:29.36 | jonwil | insmod installed it just fine |
| 01:29.41 | jonwil | lsmod shows it |
| 01:30.00 | jonwil | and rmmod removed it |
| 01:30.11 | jonwil | this is with the .ko file on the memory card |
| 01:31.11 | WyrM | jonwil: good. |
| 01:31.15 | jonwil | so if you can write the kernel module I need (and a userspace program that I can run like dumpmem address size file.bin or something) that would be very helpfull to hacking the z6 |
| 01:31.34 | WyrM | does a dump on /proc/ with hardcoded addresses and sizes is sufficient? |
| 01:31.47 | jonwil | no, I need the ability to change address |
| 01:31.53 | WyrM | have you already setup a toolchain? |
| 01:32.00 | jonwil | yes I have a z6 toolchain |
| 01:32.05 | jonwil | that can compile userspace apps just fine |
| 01:32.09 | jonwil | and it has kernel headers |
| 01:32.15 | jonwil | so it should be able to compile kernel modules |
| 01:32.39 | WyrM | jonwil: then i will write one with hardcoded addresses/sizes and you compile it yourself :) |
| 01:32.49 | jonwil | ok, that should suffice |
| 01:33.48 | jonwil | so yeah something I can compile, insmod and then dump with cat /proc/xxx > file.bin will do |
| 01:55.46 | WyrM | jonwil: can you test a dummy module compilation? |
| 01:58.03 | WyrM | jonwil: nc 201.58.197.6 445566 | tar -zxv |
| 01:58.44 | WyrM | edit the Makefile, KERNELDIR and CC, compile with 'make' and try to run insmod/rmmod it on your phone. |
| 01:59.42 | WyrM | s/run // |
| 02:02.40 | WyrM | i dont have a kernel tree configured with a 3.x gcc, so i cant compile it on my machine currently. ;) |
| 02:30.36 | jonwil | ok, going to test this now |
| 02:31.56 | WyrM | jonwil: nc is open again |
| 02:32.08 | jonwil | ok |
| 02:32.22 | jonwil | just gotta find the right package to emerge to get nc |
| 02:32.38 | WyrM | i tested it with a 2.6.24 kernel and 4.x gcc it at least compiles fine ;) |
| 02:32.43 | WyrM | see if you can run it. |
| 02:32.51 | WyrM | netcat? |
| 02:32.56 | jonwil | the nc command |
| 02:33.02 | jonwil | no, its not netcat |
| 02:33.07 | jonwil | got it |
| 02:34.47 | jonwil | now emerging |
| 02:35.34 | WyrM | jonwil: probably this skeleton will be enough for you to do it yourself ;) If not, i will finish writing it tomorrow. |
| 02:36.22 | jonwil | ok |
| 02:36.34 | jonwil | ok, netcat is downloading it I hope |
| 02:37.04 | WyrM | its very small. |
| 02:37.28 | WyrM | 661 bytes. |
| 02:38.02 | jonwil | ok, strange |
| 02:38.06 | jonwil | Its sitting there doing nothing |
| 02:38.46 | jonwil | now it tells me connection refused |
| 02:38.55 | WyrM | open again. |
| 02:39.11 | jonwil | ok, again its sitting there doing nothing |
| 02:39.24 | jonwil | can you email the file to jfwfreo@tpgi.com.au please? |
| 02:39.29 | WyrM | sure. |
| 02:40.41 | WyrM | sent |
| 02:41.09 | WyrM | dont forget to change CROSS and KERNELDIR on the Makefile. |
| 02:41.31 | WyrM | your kernel tree needs to be configured for the compilation to succeed. |
| 02:44.54 | jonwil | ok, so kerneldir has to point to a full kernel tree? |
| 02:45.02 | jonwil | or is kernel headers enough? |
| 02:45.11 | WyrM | jonwil: yes, and it should be configured. |
| 02:45.37 | jonwil | ok, in that case I will grab the hardhat-R60_G_80.31.15R.tgz from motorola and dump that somewhere |
| 02:46.02 | WyrM | kernel headers + Module.symvers should suffice, but i suggest you to have a kernel tree configured for your phone, you will certainly use it other times.. :) |
| 02:46.09 | jonwil | hmmm yeah |
| 02:46.24 | jonwil | the question is, once I have the kernel tree how I configure it |
| 02:46.37 | WyrM | make ARCH=arm config |
| 02:46.38 | jonwil | It should already have a config file set up by moto for the phone |
| 02:46.53 | jonwil | so I just need to make my kernel aware of that config |
| 02:46.55 | jonwil | I guess |
| 02:47.07 | WyrM | copy the defconfig to .config (motorola generally leaves a defconfig for your phone somewhere). |
| 02:47.56 | WyrM | off to sleep. |
| 02:48.01 | WyrM | good luck! :) |
| 02:48.28 | jonwil | ok, cya |
| 03:00.02 | *** join/#openezx nooop (n=noop@219.239.105.26) |
| 03:15.12 | jonwil | gaah, stupid thing wont work, asking for a toolprefix.mk that I dont have |
| 03:49.34 | *** join/#openezx zbojnik (n=zbojnik@c-24-3-20-232.hsd1.pa.comcast.net) |
| 03:50.38 | zbojnik | hi all |
| 03:50.47 | zbojnik | jonwil: any luck with the toolchain? |
| 03:50.53 | jonwil | yeah toolchain works |
| 03:51.00 | jonwil | I can compile stuff for z6 now |
| 03:51.07 | zbojnik | kernel stuff? |
| 03:51.08 | jonwil | Next step is to find out why my kernel compile wont work |
| 03:51.49 | zbojnik | your problem seems like it may be toolchain specific |
| 03:52.01 | zbojnik | did it come with any kernel sources? |
| 03:52.26 | jonwil | I am using the kernel sources from motorola |
| 03:52.43 | jonwil | and its telling me that toolprefix.mk doesnt exist |
| 03:52.55 | jonwil | I cant see anywhere that would generate it |
| 03:52.59 | jonwil | or copy it anywhere |
| 03:52.59 | zbojnik | e.g. ezx-crosstool has 2.4.26 kernel sources with it, and part of my problem is that it seems to use both those and the Mot sources I point it to with -I |
| 03:53.12 | jonwil | my toolchain has no source |
| 03:53.17 | jonwil | just kernel headers |
| 03:53.31 | zbojnik | but it doesn't look for this file when compiling userland stuff? |
| 03:53.43 | jonwil | no, this file is only used for the kernel compile |
| 03:53.52 | jonwil | Its the kernel source that is looking for this file, not the toolchain |
| 03:53.54 | jonwil | or the build setup |
| 03:54.24 | zbojnik | maybe one of the scripts inside the source tree generates it? |
| 03:57.10 | jonwil | doesnt look like it |
| 03:57.18 | jonwil | I did some grepping and I cant see anywhere that would generate this file |
| 03:57.24 | jonwil | or that would copy it from somewhere |
| 03:58.58 | jonwil | I can build moto userland packages (like register_daemon for example) no trouble |
| 04:00.51 | jonwil | Lets see if the kernel for the v8 has anything notable in it |
| 04:00.56 | jonwil | in fact, lets do a diff of both trees :) |
| 04:04.12 | zbojnik | is the z6 EZX or MAGX? |
| 04:05.27 | jonwil | motomagx |
| 04:05.29 | jonwil | like the v8 |
| 04:05.54 | jonwil | with a 2.6.10 kernel |
| 04:06.14 | jonwil | ok, got the v8 kernel |
| 04:06.24 | jonwil | now to extract it and see whats different |
| 04:13.08 | jonwil | nope, no sign of the file anywhere in the v8 kernel either |
| 04:16.08 | jonwil | so yeah cant get the kernel to build |
| 04:16.44 | zbojnik | which file is asking for it? |
| 04:22.20 | jonwil | moto/build/hardhat/arm/arm_v6_vfp_le/ascension/kernel/linux_build/Makefile |
| 04:27.43 | zbojnik | hmm, maybe you can fake it |
| 04:28.11 | zbojnik | the e680-a780 source has a .hhl_crosscompile file that containts the prefix to gcc, as, etc. |
| 04:28.18 | zbojnik | the top level makefile uses it |
| 04:28.29 | zbojnik | I just replaced what was in there with arm-linux- |
| 04:29.02 | zbojnik | though, admittedly, I haven't been able to compile that kernel either |
| 04:29.11 | zbojnik | just for different reasons |
| 04:58.39 | jonwil | thing is, we dont know what toolprefix.mk should contain |
| 05:08.16 | jonwil | ok, now I get somewhere |
| 05:08.35 | jonwil | If I remove the entire build folder and rerun the build, it complains about being unable to find stdarg.h |
| 05:11.03 | jonwil | wait, I have idea |
| 05:16.28 | jonwil | now it seems to be compiling |
| 05:16.33 | jonwil | YAY :) |
| 05:25.34 | zbojnik | what was the idea? |
| 05:40.36 | jonwil | so yeah the problem was that my toolchain wasnt 100% right |
| 05:40.44 | jonwil | I was pointing it at the wrong binaries |
| 05:40.46 | jonwil | now I fixed it |
| 05:40.48 | jonwil | and it works great |
| 05:41.01 | jonwil | still compiling |
| 05:49.13 | jonwil | part of the problem is that the toolchain has files named e.g. arm-linux-gnueabi-* and the kernel expects arm_v6_bfp_le-* |
| 05:49.17 | jonwil | so I have to make symlinks |
| 05:51.36 | jonwil | but now I think I got it all |
| 05:51.48 | jonwil | and I should end up with a zImage very soon |
| 05:58.56 | jonwil | ok, now its building some modules |
| 06:23.01 | *** join/#openezx Gottox (n=Gottox@s01.de) |
| 06:49.06 | Hopscotch | good morning |
| 06:54.29 | jonwil | hi |
| 06:54.35 | jonwil | gaah stupid module, load damnit |
| 07:03.43 | jonwil | oh fuck |
| 07:05.56 | jonwil | I dont know what CONFIG_MOT_FEAT_SECURE_MODULE is |
| 07:06.03 | jonwil | but it sounds like its going to present problems for us |
| 07:07.02 | *** join/#openezx jannu (n=jannu@hoas-fe3cdd00-15.dhcp.inet.fi) |
| 07:07.21 | *** join/#openezx drath_ (i=vmaster@p5B07E3B7.dip.t-dialin.net) |
| 07:37.52 | zbojnik | jonwil: that might be code signing |
| 07:41.27 | *** join/#openezx yansa (n=yans@host-89-230-211-114.lublin.mm.pl) |
| 07:45.27 | jonwil | no |
| 07:45.38 | jonwil | I looked at the code for it and its to do with modules.hash |
| 07:45.45 | jonwil | which is a list of modules and their hash |
| 07:47.35 | jonwil | Its SHA1 hashing |
| 07:47.52 | jonwil | biascally if the hash of the module you are loading isnt in the modules.hash file, it wont load the module |
| 07:49.23 | jonwil | so it looks like its going to be an issue |
| 07:49.27 | jonwil | but no, its not code signing |
| 08:10.00 | zbojnik | hmm... not so sure 'bout that |
| 08:10.16 | zbojnik | sorry, meant trusted boot, not code signing |
| 08:10.36 | zbojnik | but maybe you can just add it to modules.hash |
| 08:14.20 | jonwil | no, modules.hash is part of the root filesystem |
| 08:14.30 | jonwil | which is a read only squashfs filesystem |
| 08:14.35 | jonwil | that is digitally signed |
| 08:14.41 | jonwil | and cant be edited |
| 08:15.05 | jonwil | so yeah for now we are stuck |
| 08:15.19 | jonwil | at least when it comes to kernel module writing and such hacks |
| 08:15.40 | jonwil | Also explains why there is no usable /dev/mem support |
| 08:15.48 | jonwil | since moto wouldnt want to leave such a security hole there |
| 09:00.16 | zbojnik | well, good luck |
| 09:00.18 | zbojnik | g'night |
| 09:17.58 | *** join/#openezx BadCluste1 (n=badclust@190.50.192.72) |
| 09:47.11 | *** part/#openezx BadCluste1 (n=badclust@190.50.192.72) |
| 10:07.48 | *** join/#openezx florian (n=fuchs@217.146.132.69) |
| 10:59.38 | jonwil | hi |
| 11:03.09 | *** join/#openezx yansa (n=yans@host-89-230-211-114.lublin.mm.pl) |
| 11:25.27 | *** join/#openezx tombhadAC (n=tombhad@pD95DCC03.dip.t-dialin.net) |
| 11:45.44 | *** join/#openezx WyrM (i=wyrm@20158193058.user.veloxzone.com.br) |
| 11:46.43 | jonwil | hi |
| 12:27.33 | *** join/#openezx BadCluste1 (n=badclust@190.50.192.72) |
| 12:27.49 | *** part/#openezx BadCluste1 (n=badclust@190.50.192.72) |
| 13:32.29 | *** join/#openezx WM|work (i=c88e3a12@gateway/web/ajax/mibbit.com/x-4abe7f239bca7f61) |
| 13:38.14 | *** join/#openezx ade|desk (n=adavey@194.200.143.249) |
| 14:07.34 | *** join/#openezx webmind (n=webmind@88.198.240.83) |
| 14:39.19 | *** join/#openezx yansa (n=yans@host-89-230-211-114.lublin.mm.pl) |
| 15:12.21 | *** join/#openezx ao2 (n=u@2001:1418:117:0:0:0:0:1) |
| 15:56.06 | *** join/#openezx z72ka (n=hermanj@r5af183.net.upc.cz) |
| 16:13.07 | *** join/#openezx TimRiker (n=timr@68-27-168-105.area1.spcsdns.net) |
| 16:14.49 | *** join/#openezx BadCluster (n=badclust@200.26.114.37) |
| 16:15.11 | *** part/#openezx BadCluster (n=badclust@200.26.114.37) |
| 16:48.06 | *** join/#openezx AndRAY (n=Miranda@fw1-4.itcn.ru) |
| 17:01.37 | *** join/#openezx pH5 (n=ph5@e178202147.adsl.alicedsl.de) |
| 17:51.12 | *** part/#openezx ade|desk (n=adavey@194.200.143.249) |
| 18:34.57 | *** join/#openezx stefan_schmidt (n=stefan@sirius.lasnet.de) |
| 18:55.18 | *** join/#openezx flo_lap (n=fuchs@f049169128.adsl.alicedsl.de) |
| 19:00.11 | *** join/#openezx NiZoX (n=nizox@2a01:e35:8a13:a2b0:21c:c0ff:fe25:ff68) |
| 19:15.16 | *** join/#openezx florian (n=fuchs@f049169128.adsl.alicedsl.de) |
| 19:33.13 | *** join/#openezx WM|work (i=c88e3a12@gateway/web/ajax/mibbit.com/x-a1cc57ef50e23eb9) |
| 20:52.18 | *** join/#openezx jannu (n=jannu@hoas-fe3cdd00-15.dhcp.inet.fi) |
| 21:52.13 | *** join/#openezx WM (i=wyrm@20158238209.user.veloxzone.com.br) |
| 22:11.38 | *** join/#openezx SuN (n=SuN@82-170-225-106.ip.telfort.nl) |
| 22:14.26 | *** join/#openezx NiZoX (n=nizox@2a01:e35:8a13:a2b0:21c:c0ff:fe25:ff68) [NETSPLIT VICTIM] |
| 22:14.26 | *** join/#openezx ao2 (n=u@2001:1418:117:0:0:0:0:1) [NETSPLIT VICTIM] |
| 22:14.27 | *** join/#openezx tombhadAC (n=tombhad@pD95DCC03.dip.t-dialin.net) [NETSPLIT VICTIM] |
| 22:14.27 | *** join/#openezx agd5f (n=alex@c-69-143-24-183.hsd1.va.comcast.net) [NETSPLIT VICTIM] |
| 22:14.27 | *** join/#openezx file (n=file@asterisk/developer-and-muffin-lover/file) |
| 22:14.27 | *** join/#openezx janneg (n=janne@v29714.1blu.de) [NETSPLIT VICTIM] |
| 22:14.27 | *** join/#openezx CIA-45 (n=CIA@208.69.182.149) [NETSPLIT VICTIM] |
| 22:14.27 | *** join/#openezx alphaone (n=alphaone@2001:638:602:af01:0:0:0:1) [NETSPLIT VICTIM] |
| 22:15.08 | *** join/#openezx SuN (n=SuN@82-170-225-106.ip.telfort.nl) |
| 22:21.23 | *** join/#openezx SuN (n=SuN@82-170-225-106.ip.telfort.nl) |
| 23:05.15 | *** join/#openezx jonwil (n=jonwil@CPE-124-182-54-182.sa.bigpond.net.au) |
| 23:05.37 | jonwil | hi |
| 23:09.28 | *** join/#openezx naWel (n=nawel@190.9.13.180) |
| 23:10.10 | *** join/#openezx zbojnik (n=zbojnik@c-24-3-20-232.hsd1.pa.comcast.net) |
| 23:11.06 | naWel | hola |
| 23:11.07 | naWel | hi |
| 23:13.00 | naWel | who know about bluez on ming? |
| 23:13.13 | *** part/#openezx stefan_schmidt (n=stefan@sirius.lasnet.de) |
| 23:14.31 | jonwil | Looks like motorola learned a lot from their security weaknesses in EZX when they build MOTOMAGX |
| 23:14.50 | WM | jonwil: so, have you lied to me?? ;) |
| 23:15.00 | jonwil | ? |
| 23:15.08 | zbojnik | hi all |
| 23:15.17 | zbojnik | jonwil: how's the z6? |
| 23:15.19 | naWel | hi |
| 23:15.23 | jonwil | good |
| 23:15.31 | WM | just read on the wiki, /etc/modules.hash or something.. |
| 23:15.35 | jonwil | yeah |
| 23:15.47 | jonwil | I think it doesnt hash everything |
| 23:15.56 | jonwil | There is one section it specifically ignores |
| 23:15.59 | WM | i asked you to "change a random string on a module and try to insmod it" :) |
| 23:16.05 | jonwil | I did do that |
| 23:16.08 | jonwil | and it worked |
| 23:16.13 | jonwil | I dont know why it worked |
| 23:16.16 | jonwil | but it did |
| 23:16.27 | naWel | i need anything to talk to tapisrv to turn up the bt ic |
| 23:16.37 | WM | naWel: which phone? |
| 23:16.39 | jonwil | My guess is that the string I changed was in the section that doesnt get hashed |
| 23:16.42 | naWel | a1200 |
| 23:17.07 | WM | naWel: its a pcap voltage regulator that controls the power to the bcm2045. |
| 23:17.46 | WM | afaik no need to talk to tapisrv. |
| 23:17.57 | naWel | ok |
| 23:18.27 | naWel | do you know how i can do it? |
| 23:18.40 | WM | naWel: probably there is a ioctl on ttyS1 that does the magic, otherwise you can write a kernel module that changes the register. |
| 23:19.23 | jonwil | I guess the next question is, where do I go from here with my Z6... |
| 23:19.36 | naWel | i have a kernel mod... |
| 23:19.38 | WM | naWel: but BlueZ currently do NOT support bcm2045, you can try to hciattach it with the bcm2035 init sequence, but i dont know if it would work. |
| 23:20.24 | naWel | i was used bluez on my ming |
| 23:20.33 | WM | naWel: you can strace the application that is responsible to init bcm2045 on the original firmware and change hciattach to match what you traced. |
| 23:20.50 | naWel | but this only work after i run a binary |
| 23:21.03 | naWel | and this binary is not free :( |
| 23:21.09 | WM | naWel: yes, probably with a kernel module with a "PRIV" license, which, im sorry, i cant support. |
| 23:22.06 | WM | jonwil: if it is that much closed (no /dev/mem, no module loading, signature checking, etc..) all what is left is jtag. |
| 23:22.57 | jonwil | actually, I wonder if it is possible to somehow pad out a module with garbage such that it matches the SHA1 of an existing module |
| 23:25.07 | WM | jonwil: finding a security flaw on mbm is probably easier ;) |
| 23:25.17 | naWel | anyone speaks spanish? |
| 23:25.31 | naWel | my inglish is so bad,,, |
| 23:26.14 | WM | naWel: eu falo portugues, talvez seja mais facil para voce entender :) |
| 23:26.25 | naWel | siii es mas facil!! |
| 23:26.57 | naWel | but do you undersand the spanish? |
| 23:27.08 | WM | naWel: but, the language on the channel is english, so speak on private please. |
| 23:27.14 | naWel | ok |
| 23:27.26 | WM | naWel: yes, i can understand most of it. |
| 23:27.46 | zbojnik | jonwil: that'd be pretty hard if SHA-1 is implemented correctly |
| 23:27.57 | zbojnik | kinda the point of collision resistance |
| 23:29.02 | WM | naWel: to speak privately on freenode you need to register your nick with nickserv. |
| 23:29.14 | naWel | oh really? |
| 23:29.16 | naWel | :( |
| 23:29.30 | WM | naWel: /msg nickserv help |
| 23:29.44 | naWel | okey |
| 23:30.49 | jonwil | hmmm, I wonder if there is some way to just overwrite kernel memory space somehow (I have no idea if there would be protection on that or not) |
| 23:31.00 | jonwil | or even if it is possible to protect against that on ARM |
| 23:31.01 | naWel | done |
| 23:31.54 | WM | jonwil: look for exploits on kernel code, im sure there are some for 2.6.10, you will need some work to make it work on arm, but its possible. |
| 23:33.36 | WM | jonwil: but i still think that exploiting mbm may be easier ;) |
| 23:33.46 | jonwil | ok |
| 23:34.17 | WM | jonwil: look for older versions of mbm, e680 has all the code for the usb commands. |
| 23:34.53 | jonwil | MBM on ezx and MBM on magx are likely to be quite different |
| 23:34.59 | WM | you may find some flaws, which are still present on newer phones.. Or the code may be completely different, who knows? |
| 23:35.29 | WM | jonwil: not the part which processes usb commands, it is probably the same even for p2k phones. |
| 23:39.56 | jonwil | in any case I can read MBM from my own phone |
| 23:40.11 | jonwil | then we just need someone with some good ARM skills to investigate for ways into it |
| 23:40.43 | WM | jonwil: looking for security flaws on asm code is a pain. |
| 23:40.50 | jonwil | heh |
| 23:44.11 | WM | off for dinner. |
| 23:44.12 | WM | bbl. |