| 01:48.22 | CIA-55 | OpenEZX: wyrm * r2146 /trunk/src/blob/gen-blob/ (290 files in 17 dirs): initial import |
| 03:19.59 | *** join/#openezx flyhorse|linux (n=flyhorse@59.37.233.136) [NETSPLIT VICTIM] |
| 03:26.13 | *** join/#openezx dimichxp (n=dimichxp@91.185.54.193) |
| 04:11.45 | *** join/#openezx flyhorse|linux (n=flyhorse@59.37.233.136) [NETSPLIT VICTIM] |
| 04:21.28 | *** join/#openezx agd5f (n=alex@c-68-49-28-208.hsd1.va.comcast.net) |
| 04:26.33 | *** join/#openezx flyhorse|linux (n=flyhorse@59.37.233.136) [NETSPLIT VICTIM] |
| 04:43.14 | *** join/#openezx flyhorse|linux (n=flyhorse@59.37.233.136) [NETSPLIT VICTIM] |
| 04:53.21 | *** join/#openezx agd5f (n=alex@c-68-49-28-208.hsd1.va.comcast.net) |
| 04:57.15 | *** join/#openezx flyhorse|linux (n=flyhorse@59.37.233.136) [NETSPLIT VICTIM] |
| 05:38.14 | *** join/#openezx flyhorse|linux (n=flyhorse@59.37.233.136) [NETSPLIT VICTIM] |
| 06:04.41 | *** join/#openezx drath_ (i=vmaster@p5B07DC2B.dip.t-dialin.net) |
| 07:06.14 | Hopscotch | good morning |
| 09:44.49 | *** join/#openezx dimichxp (n=dimichxp@91.185.54.193) |
| 10:10.22 | *** join/#openezx florian_ (n=fuchs@217.146.132.69) |
| 10:35.01 | *** join/#openezx ao2 (n=u@2001:1418:117:0:0:0:0:1) |
| 11:22.24 | *** join/#openezx p3t3r__ (n=peter@gate1.net-you.de) |
| 11:22.42 | *** part/#openezx p3t3r__ (n=peter@gate1.net-you.de) |
| 11:22.48 | *** join/#openezx p3t3r__ (n=peter@gate1.net-you.de) |
| 12:07.47 | *** join/#openezx dimichxp (n=dimichxp@89.108.88.71) |
| 12:12.48 | *** join/#openezx ao2 (n=u@2001:1418:117:0:0:0:0:1) |
| 12:21.26 | *** join/#openezx ade|desk (n=adavey@194.200.143.249) |
| 12:26.42 | *** join/#openezx janneg (n=janne@tichy.grunau.be) [NETSPLIT VICTIM] |
| 12:37.39 | *** part/#openezx p3t3r__ (n=peter@gate1.net-you.de) |
| 12:37.45 | *** join/#openezx p3t3r__ (n=peter@gate1.net-you.de) |
| 12:58.54 | WyrM | magx security exploited! |
| 12:59.11 | WyrM | http://wiki.openezx.org/MotoMAGX_weakness_of_kernel_modules_hashes |
| 13:01.05 | stefan_schmidt | WyrM: *g* You are to fast :) |
| 13:01.17 | stefan_schmidt | I talked with Dimitry to publish his stuff. |
| 13:01.47 | stefan_schmidt | He also has some code he will release later. Not sure about the while status. We will see how far we can go with this. :) |
| 13:02.10 | stefan_schmidt | I'll write a mail about this later to the list. If you like to beat me, feel free. |
| 13:02.29 | WyrM | stefan_schmidt: No, i will leave this to you! |
| 13:02.37 | stefan_schmidt | heh, ok |
| 13:03.00 | WyrM | Its great to see this! Thanks Dimitry! :) |
| 13:03.14 | stefan_schmidt | yeah, great research |
| 13:03.24 | stefan_schmidt | Something we hoped for. :) |
| 13:41.43 | ade|desk | looking like the EZX project has really hit fully speed again, this is fantastic news. |
| 13:42.05 | stefan_schmidt | yeah, some boost again, finally. |
| 13:42.26 | ade|desk | each time I read a mail to the list I want to try my a780 again |
| 13:42.52 | ade|desk | quite eager to try this new blob2 |
| 13:43.56 | stefan_schmidt | :) |
| 13:45.14 | ade|desk | i'll go buy a 2gb microsd this weekend |
| 13:49.28 | WyrM | dimichxp: congrats for the magx exploit! Great work! :) |
| 13:49.36 | WyrM | wants to buy a magx phone now :) |
| 13:50.29 | dimichxp | thanks |
| 13:51.42 | stefan_schmidt | WyrM: (Ab-)use the one from your dad. ;) |
| 13:52.42 | WyrM | stefan_schmidt: i will buy him a new phone, and take his z6 :) |
| 13:53.41 | stefan_schmidt | WyrM: good plan :) |
| 13:58.50 | stefan_schmidt | If we really have success with the exploit I need to check for an Z6, too. |
| 14:00.23 | dimichxp | actually exploit works very well |
| 14:07.37 | *** join/#openezx microlith (n=no@c-76-105-18-51.hsd1.ca.comcast.net) |
| 14:11.20 | stefan_schmidt | already has some ebay auctions open |
| 14:15.26 | WyrM | dimichxp: and the exploit is polite to check that it is changing the right data.. I would just str new, [ptr] ;) |
| 14:15.44 | WyrM | is ptr the same on all phones you tested? |
| 14:15.53 | dimichxp | oh now. it depends on kernel |
| 14:16.12 | dimichxp | you can find out right address using IDA pretty easily |
| 14:24.30 | WyrM | dimichxp: is there any software that looks for ptr address, and automagically patches motsecurity.ko? Or plans to write one? |
| 14:25.13 | WyrM | it would be good to have a simple executable proof of concept exploit :) |
| 14:25.54 | dimichxp | automated? hm. i think it would be hard. i made several exploits for different kernels & models with by hands |
| 14:26.03 | dimichxp | ok, provide me your kernel |
| 14:26.12 | dimichxp | which firmware do you use? |
| 14:26.25 | WyrM | dimichxp: i dont own an magx phone :) |
| 14:27.26 | dimichxp | WyrM: so it's exploit is useless for you, though :) |
| 14:35.14 | stefan_schmidt | ok, I'm leaving now. Writing a mail later to attract a bigger audience. |
| 14:36.39 | WyrM | dimichxp: i suppose that magx doesnt have a /proc/kallsyms, right? |
| 14:37.50 | dimichxp | WyrM: really don't know since i don't own magx phone too. need to look a kernel source, though |
| 14:38.59 | ghane | good morning |
| 14:39.25 | WyrM | dimichxp: maybe, if it has kallsyms, ptr can be looked on the fly easily, and your exploit made "generic". |
| 14:39.29 | dimichxp | ghane: hello |
| 14:40.14 | ghane | hi dimichxp |
| 14:41.55 | dimichxp | WyrM: so we need to gather an address of module_hash_verify routine |
| 14:42.01 | dimichxp | in runtime |
| 14:45.41 | WyrM | anybody with a magx phone can check if there is a kallsyms file on /proc? |
| 14:48.22 | WyrM | has to go to work. |
| 14:48.32 | WyrM | will do some research on this later. |
| 14:49.49 | WyrM | dimichxp: thanks again, your research freed the magx phones, you're great! :) |
| 14:52.56 | dimichxp | nothing for, i'll be happy to work with you |
| 15:33.10 | ghane | i will be back as soon as i get home to sweden again |
| 15:36.18 | ghane | later |
| 15:38.28 | *** join/#openezx flyhorse|linux (n=flyhorse@59.37.233.136) |
| 15:42.20 | *** part/#openezx dimichxp (n=dimichxp@89.108.88.71) |
| 15:42.28 | *** join/#openezx flyhorse|linux (n=flyhorse@59.37.233.136) |
| 15:55.57 | *** part/#openezx ade|desk (n=adavey@194.200.143.249) |
| 16:52.40 | *** join/#openezx sabro1 (n=sabrod@lns-bzn-37-82-253-24-9.adsl.proxad.net) |
| 17:43.45 | *** join/#openezx TimRiker (n=timr@70-7-98-242.area7.spcsdns.net) |
| 17:55.41 | *** join/#openezx rettichschnidi (n=reto@32-32.0-85.cust.bluewin.ch) |
| 18:00.04 | *** join/#openezx TimRiker (n=timr@pdpc/supporter/bronze/TimRiker) |
| 18:17.44 | *** join/#openezx pH5 (n=ph5@e178222028.adsl.alicedsl.de) |
| 19:02.01 | *** join/#openezx Marex (n=marex@vasut.kolej.mff.cuni.cz) |
| 19:45.20 | *** join/#openezx flo_lap (n=fuchs@f049168218.adsl.alicedsl.de) |
| 19:53.09 | *** join/#openezx sabro1 (n=sabrod@lns-bzn-37-82-253-24-9.adsl.proxad.net) |
| 20:00.22 | *** join/#openezx rettichschnidi (n=reto@32-32.0-85.cust.bluewin.ch) |
| 20:34.50 | *** join/#openezx hendryjh (n=jhendry@ip70-177-186-164.dc.dc.cox.net) |
| 21:29.42 | *** join/#openezx rettichschnidi (n=reto@32-32.0-85.cust.bluewin.ch) |
| 21:34.28 | *** join/#openezx rettichschnidi (n=reto@32-32.0-85.cust.bluewin.ch) |
| 21:43.38 | *** join/#openezx rettichschnidi (n=reto@32-32.0-85.cust.bluewin.ch) |
| 21:54.25 | *** join/#openezx Fosforo (n=Fosforo@20151055038.user.veloxzone.com.br) |
| 22:08.56 | *** join/#openezx Marex (n=marex@vasut.kolej.mff.cuni.cz) |
| 22:42.27 | *** join/#openezx CIA-25 (n=CIA@208.69.182.149) |
| 23:04.25 | *** join/#openezx WyrM (i=wyrm@20158227137.user.veloxzone.com.br) |
| 23:07.27 | *** join/#openezx florian (n=fuchs@f049168218.adsl.alicedsl.de) |
| 23:59.27 | *** join/#openezx dimichxp (n=dimichxp@89.108.88.71) |