Re: [DNG] keys & subsystems

2018-07-29 Thread Simon Hobson
Arnt Karlsen  wrote:

> ..or "make do with whatever you have onboard" in new "creative" ways.
> 
> ..people has played music on printers and harddisks produced to print
> oud documents and store data, by hacking them in new creative ways, 
> for decades.

Yes, but that's someone with access to the hardware doing it - and hardly a 
general purpose way of communicating without the user realising. IMO this 
thread has strayed rather a long way into tinfoil hat territory ...

However, there is a practical (or at least, possible) way for a storage device 
(eg SSD) to "phone home". Since it holds the bootloader and the OS, then in 
theory it could examine the contents of that, and feed in it's own shim before 
the main OS and sit there as this undetectable layer between the OS and the 
hardware, or just add in it's own bit of code to the OS (though code signing 
might break with that).
That would probably work as a very targeted attack (and lets be honest, if you 
are of that much interest to the TLAs then you have bigger problems to worry 
about) where the target environment is well understood, but in the general case 
I think it would be more work than is justified. Just think of all the 
compatibility issues it would be likely to cause - getting that model of drive 
a bad reputation for crashing the systems. Even where it's a highly targeted 
attack, it would almost certainly be easier to simply "borrow" your laptop and 
copy the data from it than it would be to somehow persuade you to buy and fit a 
compromised new SSD !

At some point you have to put the paranoia on hold and get on with life ;-)


___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng


Re: [DNG] keys & subsystems

2018-07-29 Thread Alessandro Selli
On Sun, 29 Jul 2018 at 05:08:30 +0200
Arnt Karlsen  wrote:

> On Sun, 29 Jul 2018 02:28:52 +0200, Alessandro wrote in message 
> <20180729022852.5208a5ca@ayu.localdomain>:
>
>> On Sat, 28 Jul 2018 at 15:28:56 +0200
>> Arnt Karlsen  wrote:
>>   
>>> On Sat, 28 Jul 2018 10:07:53 +0200, Alessandro wrote in message 
>>> <20180728100753.4ff8dd7c@ayu.localdomain>:
>>>
 On Fri, 27 Jul 2018 at 14:17:14 -0500
 Eric Lee Elliott  wrote:
 
 [...]
   
> like 
> memory sticks are know to have internal computers.  How do Devuan
> users know the SSD is not calling home
 
 How could they possibly do it?   
>>>
>>> ..using any available networking hw in a non-standard way that flies
>>> under our radars.
>> 
>>   How could it access a different piece of hardware on the system
>> bypassing the kernel?  
>
> ..e.g. using part of a binary "lose weight ad" crafted to do this.

  Which means you'd need *this* binary to do the actual "dirty work".
So, what would you need the SSD-embedded binary to do that your "lose weight
ad" binary could not do?

 Do you think they have a WiFi embedded?  
>>>
>>> ..always possible, in some non-standard form to fly under our
>>> radars.
>> 
>>   All I can think of is having the device emit a given noise (EM or
>> mechanical) that a device could pick up and decode.  But you'd need an
>> external device.  
>
> ..or "make do with whatever you have onboard" in new "creative" ways.

  That is?

> ..people has played music on printers and harddisks produced to print
> oud documents and store data, by hacking them in new creative ways, 
> for decades.

  Yes, I know.  Why do you think that poses a security threat?


Alessandro
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng


Re: [DNG] keys & subsystems

2018-07-29 Thread Didier Kryn

Le 28/07/2018 à 09:32, KatolaZ a écrit :

On Fri, Jul 27, 2018 at 02:17:14PM -0500, Eric Lee Elliott wrote:

How can I make hardware keys work in a Thinkpad T500?  Vol+, Vol- & Mute are
only ones I would use. In other Linux distros the mute, vol+ & vol - keys
work.  A link to a way would be good enough for me.


I wrote a small HOWTO a few months ago about using F5-F6 to control
brightness:

   http://kalos.mine.nu/bright/

but a similar procedure can be used for any control, with few
adjustments. Most of the trick is in understanding which event is
generated by each button.

Shout if you need further help.

HTH

KatolaZ


    Hi.

    I tried it:, hitting fn+f5 gives the following:

root@apcnb98:/etc/acpi# acpi_listen
^[[15~

Hitting some keys produce a message similar to the one you say, bus most 
keys produce no output or one similar to the above. Some have an effect 
though, such as putting the laptop in sleep mode, which I understand. 
The association with the character sequence produced by the key and the 
button name must be configured somewhere.


    Didier

___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng


Re: [DNG] [OT] donate to Slackware

2018-07-29 Thread Steve Litt
On Sat, 28 Jul 2018 17:48:12 -0700
Bruce Perens  wrote:

> He hasn't answered. I did send $100. Hopefully he'll get out of his
> situation.

How and to what email or domain did you make the contribution? How
comfortable are you that your $100 will actually get to him?

I've been holding off until I can find a contribution method I'm
certain will get to him and not his parasites.

SteveT

Steve Litt
Author: The Key to Everyday Excellence
http://www.troubleshooters.com/key
Twitter: http://www.twitter.com/stevelitt

___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng


Re: [DNG] [OT] donate to Slackware

2018-07-29 Thread Jimmy Johnson

On 07/29/2018 08:33 AM, Steve Litt wrote:

On Sat, 28 Jul 2018 17:48:12 -0700
Bruce Perens  wrote:


He hasn't answered. I did send $100. Hopefully he'll get out of his
situation.


How and to what email or domain did you make the contribution? How
comfortable are you that your $100 will actually get to him?

I've been holding off until I can find a contribution method I'm
certain will get to him and not his parasites.



"Fri Jul 27 21:01:22 UTC 2018
Hey folks, my first order of business here needs to be a huge thank you 
to everyone who has donated at https://paypal.me/volkerdi to help keep 
this project going."

 ftp://ftp.osuosl.org/pub/slackware/slackware64-current/ChangeLog.txt
--
Jimmy Johnson

Slackware 14.2-64 - KDE 4.14.32 - AMD A8-7600 - EXT4 at sda9
Registered Linux User #380263

___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng


Re: [DNG] [OT] donate to Slackware

2018-07-29 Thread KatolaZ
On Sun, Jul 29, 2018 at 08:39:45AM -0700, Jimmy Johnson wrote:
> On 07/29/2018 08:33 AM, Steve Litt wrote:
> > On Sat, 28 Jul 2018 17:48:12 -0700
> > Bruce Perens  wrote:
> > 
> > > He hasn't answered. I did send $100. Hopefully he'll get out of his
> > > situation.
> > 
> > How and to what email or domain did you make the contribution? How
> > comfortable are you that your $100 will actually get to him?
> > 
> > I've been holding off until I can find a contribution method I'm
> > certain will get to him and not his parasites.
> 
> 
> "Fri Jul 27 21:01:22 UTC 2018
> Hey folks, my first order of business here needs to be a huge thank you to
> everyone who has donated at https://paypal.me/volkerdi to help keep this
> project going."
>  ftp://ftp.osuosl.org/pub/slackware/slackware64-current/ChangeLog.txt

Looks legit. I have donated as well. Slackware cannot die.

HND

KatolaZ

-- 
[ ~.,_  Enzo Nicosia aka KatolaZ - Devuan -- Freaknet Medialab  ]  
[ "+.  katolaz [at] freaknet.org --- katolaz [at] yahoo.it  ]
[   @)   http://kalos.mine.nu ---  Devuan GNU + Linux User  ]
[ @@)  http://maths.qmul.ac.uk/~vnicosia --  GPG: 0B5F062F  ] 
[ (@@@)  Twitter: @KatolaZ - skype: katolaz -- github: KatolaZ  ]


signature.asc
Description: PGP signature
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng