By Bill KingPosted Friday 20th April 2007 06:49 GMT
Trolltech aims to rectify that in it's next release of qtopia for mobile devices. More info at the folowing link: http://doc.trolltech.com/qtopia4.2/sxe.html
I've got this PC at home. I found out last night, that by simply opening the box, and taking out the hard drive a criminal can remove Linux and install Windows 2000, making the machine completely insecure, but he can't do this remotely - what a relief there.
Seriously, Mr Jack is doing two things with his fud, both of which make me mad:
1) Showing a really crap example. A few early router devices might have allowed admin access on the 'wan' side, but virtually none default to that now.
2) There's a small chance that in response router manufacturers start removing the JTAG connectors and serial consoles from boards, thus ruining the fun for thousands of hackers (not crackers) and hobbyists creating solutions based on OpenWRT (www.openwrt.org), or even less likely projects like my router-based alarm clock: http://www.biffer.talktalk.net/sweex/clock/
This shouldn't be news... go to Dr Dobb's and look up Ed Nisley's articles, you'll find a wealth of information there. He won't tell you specifics, but enough detail to get you seriously thinking...
By Anonymous CowardPosted Saturday 21st April 2007 15:30 GMT
Many large (especially financial) organizations have legacy hardware that needs to be maintained through hardware purchases from wherever they can - including eBay.
Just do your modifications and put it up for bid. You will find out where it is going through the purchase and there you have just put a backdoor into a nice target.
By Anonymous CowardPosted Monday 23rd April 2007 12:02 GMT
True, but I seriously doubt many spammers are considering this for a 'business plan'. Sell something on Ebay and even if you demand payment in cash you are traceable, since the payment has to go somewhere.
Comments on: Embedded devices a cinch to pwn
Qtopia aims to fix that #
By Bill King Posted Friday 20th April 2007 06:49 GMT
Nonsense #
By Biff Posted Friday 20th April 2007 13:09 GMT
Dr Dobbs been talking about this for years... #
By Pat Posted Friday 20th April 2007 16:12 GMT
Remote Attack is possible #
By Anonymous Coward Posted Saturday 21st April 2007 15:30 GMT
Re: Remote attack is possible #
By Anonymous Coward Posted Monday 23rd April 2007 12:02 GMT