Comments for Hak5 - Technolust since 2005 http://Hak5.org Trust Your Technolust Wed, 08 Feb 2012 06:47:16 +0000 hourly 1 http://wordpress.org/?v=3.3.1 Comment on HakTip 50 – Update All of Your Programs at Once With AppUpdater! by Pixelated Dwarf http://Hak5.org/episodes/haktip-50#comment-49259 Pixelated Dwarf Wed, 08 Feb 2012 06:47:16 +0000 http://Hak5.org/?p=4509#comment-49259 rm -rf HakTips 42-49 rm -rf HakTips 42-49

]]> Comment on Hak5 1023 – Automate Everything, Using Expect and Encrypting One Cloud by redxine http://Hak5.org/episodes/hak5-1023#comment-49256 redxine Tue, 07 Feb 2012 22:28:20 +0000 http://Hak5.org/?p=4488#comment-49256 I got thinking of protecting against evil rubber duckies and realised that mass storage isn't the problem. While it's relatively simple to prevent FUSE from mounting mass storage automatically, the thing we want is to prevent the "mass storage device" from sending HID events. Perhaps setting up a cheap and old box (or perhaps even a little RaspberryPi) with the usbhid module blacklisted (sudo modprobe -r usbhid) to plug a device to check into. A wireshark/usb dump can be done over ssh, et al to inspect the true intentions of the device. It's a simple way to check for vendor ID, etc. and since it only requires runlevel 3, mouse and keyboard events/attacks can be rendered useless with a repurposed getty input (perhaps just an inkey program that redirects to a file to figure out what said evil rubberducky is up to). I got thinking of protecting against evil rubber duckies and realised that mass storage isn’t the problem. While it’s relatively simple to prevent FUSE from mounting mass storage automatically, the thing we want is to prevent the “mass storage device” from sending HID events.

Perhaps setting up a cheap and old box (or perhaps even a little RaspberryPi) with the usbhid module blacklisted (sudo modprobe -r usbhid) to plug a device to check into. A wireshark/usb dump can be done over ssh, et al to inspect the true intentions of the device. It’s a simple way to check for vendor ID, etc. and since it only requires runlevel 3, mouse and keyboard events/attacks can be rendered useless with a repurposed getty input (perhaps just an inkey program that redirects to a file to figure out what said evil rubberducky is up to).

]]> Comment on Behind Hak5 by juan http://Hak5.org/blog/backstage/behind-hak5#comment-49252 juan Tue, 07 Feb 2012 06:01:38 +0000 http://Hak5.org/?p=4353#comment-49252 Great behind the scenes video! I was just wondering, what monitors do you(Paul)\ use in your editing station? Thanks and keep the good work! Great behind the scenes video! I was just wondering, what monitors do you(Paul)\ use in your editing station? Thanks and keep the good work!

]]> Comment on HakTip 50 – Update All of Your Programs at Once With AppUpdater! by nik http://Hak5.org/episodes/haktip-50#comment-49250 nik Tue, 07 Feb 2012 03:19:24 +0000 http://Hak5.org/?p=4509#comment-49250 Shannons face is saved in a werid action ( youtube random still ) Shannons face is saved in a werid action ( youtube random still )

]]> Comment on HakTip 50 – Update All of Your Programs at Once With AppUpdater! by mike http://Hak5.org/episodes/haktip-50#comment-49244 mike Mon, 06 Feb 2012 15:58:51 +0000 http://Hak5.org/?p=4509#comment-49244 What happened to haktip 42 through 49? What happened to haktip 42 through 49?

]]> Comment on Hak5 1023 – Automate Everything, Using Expect and Encrypting One Cloud by Gord Campbell http://Hak5.org/episodes/hak5-1023#comment-49241 Gord Campbell Mon, 06 Feb 2012 00:11:40 +0000 http://Hak5.org/?p=4488#comment-49241 To safely insert a flash drive, in Ubuntu 11.10 go to the top-right corner and click System Settings. Select "Removable Media." Check the box, "Never prompt or start programs on media insertion." To safely insert a flash drive, in Ubuntu 11.10 go to the top-right corner and click System Settings. Select “Removable Media.” Check the box, “Never prompt or start programs on media insertion.”

]]> Comment on Hak5 1023 – Automate Everything, Using Expect and Encrypting One Cloud by BenjaminD. http://Hak5.org/episodes/hak5-1023#comment-49239 BenjaminD. Sun, 05 Feb 2012 21:03:05 +0000 http://Hak5.org/?p=4488#comment-49239 Hey Darren, could you not just start a linux live-cd (or live-usb for that matter) and then plug in the suspicious usb drive? It may be a bit anoying, but I think it is safe. BenjaminD. Hey Darren,

could you not just start a linux live-cd (or live-usb for that matter) and then plug in the suspicious usb drive?

It may be a bit anoying, but I think it is safe.

BenjaminD.

]]> Comment on HakTip 50 – Update All of Your Programs at Once With AppUpdater! by Robert http://Hak5.org/episodes/haktip-50#comment-49237 Robert Sat, 04 Feb 2012 18:39:44 +0000 http://Hak5.org/?p=4509#comment-49237 I use Secunia PSI and CNET TechTracker I use Secunia PSI and CNET TechTracker

]]> Comment on HakTip 50 – Update All of Your Programs at Once With AppUpdater! by Tommy M http://Hak5.org/episodes/haktip-50#comment-49234 Tommy M Sat, 04 Feb 2012 06:40:55 +0000 http://Hak5.org/?p=4509#comment-49234 SUMo and FileHippo Updater. Secunia PSI is ok tool. I'm very curious about this tool. SUMo and FileHippo Updater. Secunia PSI is ok tool. I’m very curious about this tool.

]]> Comment on Hak5 1017 – 23 Questions with Kevin Mitnick by Phil http://Hak5.org/episodes/hak5-1017#comment-49233 Phil Sat, 04 Feb 2012 00:59:39 +0000 http://Hak5.org/?p=4329#comment-49233 Owned Owned

]]> Comment on HakTip 50 – Update All of Your Programs at Once With AppUpdater! by Eric http://Hak5.org/episodes/haktip-50#comment-49232 Eric Fri, 03 Feb 2012 20:39:16 +0000 http://Hak5.org/?p=4509#comment-49232 I personally use Secunia PSI. It's for windows and it's free. http://secunia.com/vulnerability_scanning/personal/ I personally use Secunia PSI.
It’s for windows and it’s free.
http://secunia.com/vulnerability_scanning/personal/

]]>