Feeds

Hacking the Apple TV

Getting in

  • alert
  • submit to reddit

SANS - Survey on application security programs

Using the Patchstick

We plugged ATV USB Creator into the Apple TV, restarted the hardware and watched Linux boot up and SSH copied across. It takes a just couple of minutes all told, but it doesn’t automatically restart, so you’ll need to watch out for the on-screen warning to remove the patchstick and restart the Apple TV.

Login

Logging in to the Apple TV using SSH

Restarting the device, this time without the Flash drive disconnected, and we got the usual Apple TV front end. And so far there’s nothing about the UI to tell you it’s been opened up.

Starting up a terminal application on a nearby networked computer, however, and you’ll be able to log in to the Apple TV using SSH. Just enter ssh frontrow@appletv.local then key in the password — frontrow — when you’re asked for it. If appletv.local isn’t recognised, use the Apple TV’s IP address, which you can get from the machine’s Settings/General/Network menu.

SSH lets you explore the file system through a terminal application, but you’ll also need an SFTP client to copy files across easily.

Apple TV Network Settings

Apple TV’s network settings

Users comfortable with the Unix terminal may prefer the scp command. You’ll need to use the -r option to ensure Mac OS X entities that appear as single files but are actually directories get copied across in their entirety.

Now back to the modifications. ATV USB Creator allows you to load your USB boot drive with SoftwareMenu, a handy tool for running scripts and managing Apple TV functionality plug-ins — of which SoftwareMenu is itself one. We didn’t use this option, so had to install SoftwareMenu manually, which we’ll detail here. You can use ATV USB Creator, but it’s worth reading the next few paragraphs because it shows you how to install any Apple TV plug-in beyond those the ATV USB Creator and SoftwareMenu will install for you.

File transfer

Copy across files using SFTP

You can download the latest version of Thomas Cool’s SoftwareMenu from Awkward TV here. Unpack the file and you’ll get a folder containing a second folder, called SoftwareMenu.frappliance — it’s the .frappliance suffix that identifies it as an Apple TV plug-in.

SANS - Survey on application security programs

Next page: Set up SoftwareMenu

More from The Register

next story
Samsung Galaxy S5 fingerprint scanner hacked in just 4 DAYS
Sammy's newbie cooked slower than iPhone, also costs more to build
Leaked pics show EMBIGGENED iPhone 6 screen
Fat-fingered fanbois rejoice over Chinternet snaps
Oh no, Joe: WinPhone users already griping over 8.1 mega-update
Hang on. Which bit of Developer Preview don't you understand?
Microsoft lobs pre-release Windows Phone 8.1 at devs who dare
App makers can load it before anyone else, but if they do they're stuck with it
Rounded corners? Pah! Amazon's '3D phone has eye-tracking tech'
Now THAT'S what we call a proper new feature
Feast your PUNY eyes on highest resolution phone display EVER
Too much pixel dust for your strained eyeballs to handle
Zucker punched: Google gobbles Facebook-wooed Titan Aerospace
Up, up and away in my beautiful balloon flying broadband-bot
US mobile firms cave on kill switch, agree to install anti-theft code
Slow and kludgy rollout will protect corporate profits
Sony battery recall as VAIO goes out with a bang, not a whimper
The perils of having Panasonic as a partner
prev story

Whitepapers

Securing web applications made simple and scalable
In this whitepaper learn how automated security testing can provide a simple and scalable way to protect your web applications.
3 Big data security analytics techniques
Applying these Big Data security analytics techniques can help you make your business safer by detecting attacks early, before significant damage is done.
The benefits of software based PBX
Why you should break free from your proprietary PBX and how to leverage your existing server hardware.
Top three mobile application threats
Learn about three of the top mobile application security threats facing businesses today and recommendations on how to mitigate the risk.
Combat fraud and increase customer satisfaction
Based on their experience using HP ArcSight Enterprise Security Manager for IT security operations, Finansbank moved to HP ArcSight ESM for fraud management.