iLiad Userhack v2 - Page 3

DHer · 07-25-2006, 08:24 AM

ok, they changed the password =)

why didn't they shadow it?

Kristoffer · 07-25-2006, 08:28 AM

Hm so tested the other links...

i have currently just access to a windows system so I tried the windows version of netcat... but as I try to connect via "nc IP 1234" there is a small break and than nothing no message no console...

Tscherno · 07-25-2006, 08:30 AM

What if you type ls and return?

Kristoffer · 07-25-2006, 08:32 AM

Quote:

Originally Posted by Tscherno

What if you type ls and return?

Sorry, expressed it a bit faulty... nothing in this case means it returns to prompt
awaiting the next command

C:\...

Great! After some more tries it seems to be working! ls gives me the contentlist!

Tscherno · 07-25-2006, 08:42 AM

Lol they really just set a root-pw...

tribble · 07-25-2006, 08:45 AM

Quote:

Originally Posted by Tscherno

Lol they really just set a root-pw...

And? cracked it already?

Tscherno · 07-25-2006, 08:46 AM

Not yet:

C:\Temp\john-16\run>john.exe c:\Temp\passwd.txt
Loaded 1 password (Standard DES [24/32 4K])
guesses: 0 time: 0:00:18:06 (3) c/s: 295862 trying: Covy27 - hbnfgH

DHer · 07-25-2006, 08:57 AM

aargh. that means the applications still run as root? x'D

now i'm really, really sorry that i broke my iliad trying to evade the "improved security" of this update.

tribble · 07-25-2006, 08:58 AM

Quote:

Originally Posted by DHer

aargh. that means the applications still run as root? x'D

i guess it does

R2D2 · 07-25-2006, 10:20 AM

No way to flash the device? They must be joking? On the other hand: If I would like to deter hacking attempts I would probably tell you the same. haha

DHer · 07-25-2006, 10:46 AM

haha.

on the other hand: which reason do they have to prevent us beta testers from testing it. I think they'd rather like to know now which holes exist then to learn about it the moment the drm is broken by someone getting root access.

And who knows, maybe some people from the board manage to create some interesting alternative application.

arivero · 07-25-2006, 11:03 AM

Quote:

Originally Posted by DHer

HOLY F***ING S***

i bricked my iliad.

i installed netcat (no problem), created a startup script containing the line to make netcat listen to a port and provide a shell (worked) and named it S25something.

The only thing i forgot: networking is enabled later

now the listening netcat blocks the iliad boot process. And i can't use netcat because the network interface is down.

damn.

now i'll be the one to figure out how friendly the iRex user support is. :\

Moral: always set-up an abort time.

On the other hand, I think there is some internal recovery method. Yesterday I installed xrvt. It worked (no typeface, but it was working) but this morning in the restart the keyboard was not showing. Next restart it was, but, surprise, it seems the installed packages have dissapeared. So it seems that it has refreshed from the original.

arivero · 07-25-2006, 11:05 AM

Quote:

Originally Posted by Tscherno

Lol they really just set a root-pw...

So they did the right option. Really it was a needed thing.

Has the sshd package been removed? Because if it is not there, we can get it from the backup of 2.4.

arivero · 07-25-2006, 11:50 AM

Quote:

Originally Posted by DHer

HOLY F***ING S***

i bricked my iliad.
:\

BTW, would do you mind to annotate yourself in the "first" list in the users wikipage?

DHer · 07-25-2006, 03:25 PM

seems like someone already did it

07-25-2006, 08:24 AM	#31
DHer Addict Posts: 261 Karma: 156 Join Date: Jul 2006 Device: iliad	ok, they changed the password =) why didn't they shadow it?

07-25-2006, 08:28 AM	#32
Kristoffer Member Posts: 20 Karma: 56 Join Date: Jul 2006 Location: Hamburg, Germany Device: IRex Iliad	Hm so tested the other links... i have currently just access to a windows system so I tried the windows version of netcat... but as I try to connect via "nc IP 1234" there is a small break and than nothing no message no console...

07-25-2006, 08:30 AM	#33
Tscherno iLiad Geek Posts: 110 Karma: 10 Join Date: Jul 2006 Location: Regensburg / Germany Device: iLiad #505; Sony T1, Amazon Paperwhite first Gen & sec is coming!	What if you type ls and return?

07-25-2006, 08:42 AM	#35
Tscherno iLiad Geek Posts: 110 Karma: 10 Join Date: Jul 2006 Location: Regensburg / Germany Device: iLiad #505; Sony T1, Amazon Paperwhite first Gen & sec is coming!	Lol they really just set a root-pw...

07-25-2006, 08:46 AM	#37
Tscherno iLiad Geek Posts: 110 Karma: 10 Join Date: Jul 2006 Location: Regensburg / Germany Device: iLiad #505; Sony T1, Amazon Paperwhite first Gen & sec is coming!	Not yet: C:\Temp\john-16\run>john.exe c:\Temp\passwd.txt Loaded 1 password (Standard DES [24/32 4K]) guesses: 0 time: 0:00:18:06 (3) c/s: 295862 trying: Covy27 - hbnfgH

07-25-2006, 08:57 AM	#38
DHer Addict Posts: 261 Karma: 156 Join Date: Jul 2006 Device: iliad	aargh. that means the applications still run as root? x'D now i'm really, really sorry that i broke my iliad trying to evade the "improved security" of this update.

07-25-2006, 10:20 AM	#40
R2D2 Mad Scientist Posts: 294 Karma: 242 Join Date: May 2006 Location: Germany Device: Zaurus, HTCMagician, iLiad	No way to flash the device? They must be joking? On the other hand: If I would like to deter hacking attempts I would probably tell you the same. haha

07-25-2006, 10:46 AM	#41
DHer Addict Posts: 261 Karma: 156 Join Date: Jul 2006 Device: iliad	haha. on the other hand: which reason do they have to prevent us beta testers from testing it. I think they'd rather like to know now which holes exist then to learn about it the moment the drm is broken by someone getting root access. And who knows, maybe some people from the board manage to create some interesting alternative application.

07-25-2006, 03:25 PM	#45
DHer Addict Posts: 261 Karma: 156 Join Date: Jul 2006 Device: iliad	seems like someone already did it

Advert

Advert