𞋴𝛂𝛋𝛆

  • 71 Posts
  • 708 Comments
Joined 2 years ago
cake
Cake day: June 9th, 2023

help-circle


  • The easiest way I know of to check any machine is to put another router or machine in front of it with a white list firewall or way of logging DNS traffic. You just need to spot the address in the list.

    DNS filtering usually only filters on incoming packets, but for bot stuff that should catch issues.

    In general, most routers run everything from a serial flash chip on the board. These are usually 8, 16, or 32 megabytes. They have a simple bootloader like U-Boot. This is what loads the operating system. These devices have a UART serial port on the PCB. You can use a USB to serial UART adaptor to see what is happening in the device. With a proprietary OS, you are still likely to see the pre-init boot sequence that the bootloader prints to terminal. Most operating systems also print information to this interface, at least of the couple dozen junk devices I have been given and messed around with. I make a little mount for a USB to serial adaptor and add it to all of my routers when new, so I only need to plug in USB to get to the internal bootloader and tty terminal interface of OpenWRT. You will need to know the default baud rate of the device, although it is probably listed somewhere online or can be guessed as one of the common high values at or above 9600.

    Getting into this further gets complicated. It is probably better to look for any CVE that is relevant to the device or software and work backwards. Look for any software updates that have obfuscated the risk for each CVE. If the issue was not fixed, that is where to look to see if someone has exploited the device. Ultimately, they need clock cycles from the CPU scheduler. So it must be a process or some way of executing code from unregistered memory.

    This is getting to the edge of what I have messed around with and understand. There may be a way to get a memory map that includes unused pages, and compare that with a hex dump of the flash memory. This is outside of your scope of a proprietary OS, but hopefully frames the abstract scope of what is possible on this class of device when you have an open source stack. The main advantage of this kind of device and issue is that you can physically remove the flash chip and then see and manipulate every page and memory location. The device likely doesn’t have microcode loaded into the CPU(s) that make it challenging to determine what is going on.

    There is probably an easier way, but a hex dump of the current system can be hashed against the factory updated version to see if any differences are present. It is likely that any exploit will include a string with the address to connect to somewhere in flash memory. It could be obfuscated through encryption or a cypher, but a simple check for strings in the hex dump and a grep for “http” is a simple way to looks for issues.

    The OpenWRT forum is a good general source. The people behind the bootloaders for these devices are also Linux kernel developers and on the OpenWRT forum.








  • Scuba or snorkeling – diving leads to spear fishing.

    It helps to have modern elastics to make a riffle like spear gun. When under water, big fish are easy game. You’ll see them easily in the ocean and reasonably well in large rivers and lakes too. With rivers and lakes you can just noodle with large catfish. If you reach into holes and cervices, catfish will bite your hand. It is more like sucking. You just pull them up, no tackle or equipment needed.

    Without modern elastics, any bow or torsion based energy storage system would work to make a crossbow like action. I could easily flake a rock to make a crude knife, and fashion something out of some sticks.

    I would probably struggle most with my chemistry using organics I find in nature. I know stuff like the best bows are recurved with composite wood. Ultimately, I am loosely aware of the innovations of Watts with the pressure regulation of a steam engine. I know how to make bloom iron. And I know the basics of indirect heating and atmospheric control of the Bessemer process. Additionally, I am aware that the key to lathe precision is a heavy base, and that a lathe screw lead is able to cut a more accurate lathe screw lead, and eventually achieve any machine precision desired. Prussian blue or any dye based pigment, is used with a special thick chisel to hand scrape metal flat. Magnetite is the primary ore for iron. Steel is all about precision control over the carbon content. Heating calcium carbonate is super handy. Boxite requires chemistry to get to the aluminum. High voltage arcs across electrodes in air will make nitric acid, but guano is the most accessible form of nitrates at smaller scales. Potatoes are the most important food source to scavenge.

    A general deep curiosity and willingness to explore are the key personality traits. I love learning at a fundamental level where I actually understand stuff. I am not all that bright, just a jack of all trades type person where I have a very broad set of skills and understanding of the world. I’m a swiss army knife – all the tools, but the world’s shittiest scissors.





  • I’m pretty good at hunting and gathering. Back before my broken neck and back, I was super into wanting to buy some remote place in the Appalachians and pseudo homestead. I have messed with many of the required skills. I wanted a place in the mountains with a year round creek for a water wheel, building a foundry and forge, along with a manual machine shop. I was into what I could do using junk from pick-a-part type junk yards. People often only think of parts for whatever low end car, but if you actually have a fundamental understanding of cars and the various technologies in different applications, a junk yard gives tremendous access to industrial technology for many types of machines and equipment. Junk yards are not setup for that kind of thing either. A little bit of flattery and flirting with a cashier goes a very long way when none of the collection of parts on your cart have legitimate prices on the menu.

    Even with my disability now, I could probably survive in the wild by trapping game and some minor gardening if the population was low enough and I was in a decent location compared to where/when I live now in the era of the 50 year mortgage fuckwit dystopia.



  • I tend to lack the patience to make mine nice. It requires a lot of focus. There must be a fundamental difference with people that have very nice natural handwriting. I’m curious what that might be and how others perceive themselves in that space.

    Even with graphics on cars and motorcycles I rough sketched in several light strokes before establishing a more solid line. I want to write in a similar way. I almost have a subconscious mindset like each letter should be a draft with revisions or something. I do not have a vision of how I want the letter to look so I just slop something down like a rough draft. Then it is functionally readable, and I can’t easily refine it so I move on.

    Maybe it was that day in school when the teacher made me chose what hand to write with. It bugged me so much that neither hand was dominant and no matter how much the teacher insisted that I have a dominant hand, neither felt any different, so eventually she decided for me that I was right handed… and I still have not forgiven her.

    That is the moment in school when most of us selected our handedness. That is an impactful moment in life. In terms of competitive sports it may define your potential in many areas. It leads down this path of the psychology of writing.