Part 2 of our favorite things from the 2010 Consumer Electronics Show. Tune in for our first impressions of the latest in Smartbooks, Pocket HD cameras, and Drones? Plus gamer gloves with keybindings and a Lego MMORPG.

Download HD Download MP4 Download XviD Download WMV

Lenovo Skylight smartbook

Boasting a 10.1-inch screen, built-in 3G and 10 hour battery life the Lenovo Skylight is a welcome companion to our all-day connected aresnal. Powered by a Qualcomm Snapdragon processor and running a completely homebrew Linux platform we see first hand how a little ARM device can handle rich media playback and 90% including Flash. The apps leave a bit to be desired but the point of this Smartbook is web, web, web. Firefox included. SDK coming soon

Creative Vado HD 3rd Gen: More features & accessories

We caught up with the folks at Creative to find out what’s new with the Vado line of HD pocket camcorders. Darren will attest to their quality and ease of use in the moto-vlogging department but with no mic-in options like the Kodak Zi8 can Creative keep up the pace? We think so. The latest generation Vado HD sports 4GB of built-in memory capable of recording 2 hours of 720P video, real HDMI out, and a flexible USB plug. More importantly it offers a mic-in / headphone / video-out jack and there is talk of accessories. Accessories? We’re hearing about magnetic lenses and audio kits. Two words: Game Changer. I’ve preordered the $180 gadget and can’t wait for delivery in the second half of February. At which time I’ll be sure to submit some videos to their newly introduced VadoTV.com site.

Peregrine Gaming Glove

The Peregrine Gaming Glove by Iron Will Innovations has over 30 touch points for user programmable actions for PC games. All you have to do is touch your thumb to your fingertip and watch your character move on screen. The software to create your key bindings is easy to use and customizable. The touch points are durable and user-adjustable to your hand size. The glove itself is hand washable with soap and water, has ventilation, a magnetic break away USB port pod, and gold plated connectors. Soon, the pods will be available with customizable LED modes and colors. The Peregrine is available now for preorder at $129.99 until the end of January, then the price raises to $150.

Kodak Playsport waterproof HD Pocket Camera

Kodak introduced a waterproof companion to their already popular Zi8 pocket camcorder. The Playsport features full 1080p30 HD capture and a 2″ LCD display housed inside a rugged package that’s capable of submersion up to 10 feet. It sets itself apart from the crowd with it’s SDHC card expansion up to 32GB for a whopping 10 hours of HD recording time. You’ll of course need to swap out the Li-Ion battery which is thankfully removable. A remote control is sold seperately for those times when you’ve got it setup on your tripod in the deep-end…..err something. It’s available in March for $150. Sadly, no mic-in options.

Parrot AR.Drone

The Parrot AR.Drone is a wifi helicopter with 2 cameras that can be controlled by your iphone. The quadricopter is made of high resistance plastic and carbon fiber, with Wi-Fi and two small cameras installed. Software is included to process images for augmented reality. The Drone moves when you move, and can reach about 15 yards away from you at one time. Developers will be able to create their own games to be played on the iphone with the Drone, so you will be able to shoot down enemies in your living room with the augmented reality. No price yet, but word is we’ll be seeing this in the summer ’10.

Lego Universe MMO

Let your inner eleven year old play Lego! On your computer. Online. Because, well, every successful franchise needs an MMO. Details are rather limited on Lego Universe but what we do know is it’s a family friendly (moderated) MMO with your standard fare quest dispensing NPCs, themed worlds and and currency (bricks). It’s open ended in that you can use gathered bricks to build establishments, and if we heard correctly even vehicles. Supposedly there is a plot that the PR folks didn’t want to get into but feel free to geek out on the wikipedia article’s details.

At the Consumer Electronics Show in 2010, Darren and Shannon bring you their first impressions of the hottest gadgets to tickle their technolust. Stay tuned for gaming netbooks, open source set-top boxes, low-end and high-end ebook readers, hybrid gaming controllers / musical instruments and Linux lovin’ smartphones.
ces2010-part1

Download HD Download MP4 Download XviD Download WMV

Alienware M11x – Full FPS at 11 inches

Sporting a Core2Duo SU7300 and hybrid GMA & nVidia g335m graphics in a 11″ 4lbs package, the Alienware M11x has us squirming in our seats. Just in time for Darren’s birthday too *hint* *hint* this sub-$1000 rig will be available in mid-February. With 6.5 hours of battery life (3 hours gaming), a 720p display and custom lighting it’s no wonder Shannon wants one in pink.

The Boxee box, remote, beta and more

We catch up with Boxee, our favorite homebrew media center gone Internet sensation, to find out the latest. Reinforcing their previously announced Boxee Box from D-Link we check out the Boxee Remote. Designed by the same studio that brought us the xbox 360, this little couch companion feels fantastic in hand. Boxee is also excited to announce their bookmarklet and beta. And most exciting to us is the pledge to homebrew and hacking. Rock on Boxee.

The Pla$tic Logic Que

Plastic Logic announced their ebook reader, the Que. Aimed at industry, this 10″ touch sensitive eink tablet sports 4GB storage and WiFi connectivity on the base model, or 8GB storage added AT&T 3G on the pricier edition. Clearly aimed at the business professional the Que supports Microsoft office file formats and syncing with Outlook. They’ve partnered with Barnes and Noble so you can get DRM infested paid content, if you have any moola left over after plunking down $650 or $800 in mid-April. Thankfully the 3G is rolled into the price of the content downloads.

Hybrid MIDI / Gaming guitar

We got a chance to play with some prototypes of the Gambridge Z-1. These MIDI guitars gone game controllers sport individual fret buttons and strings for a more realistic playing experience. They’re working on emulating cords to match up with the falling notes found in Rock Band or Guitar Hero, but no word yet on custom integration. With the look and feel of a real instrument and full MIDI functionality we can invision gamers going rock star with this little device. No word on price but we’re told it’ll be hitting the market in time for the holidays.

jetBook-Lite, the double-A driven $150 ebook reader

No lie we love inexpensive gadgets. Even better when they do one thing and do it well. That’s exactly what we found when we picked up Ectaco’s jetBook-Lite. Supporting ePub, Mobi, PDF, the DRM-laden PDB from Barnes & Noble and more this 5″ ebook reader sports some unique features.

First of all it doesn’t use eink. Remember TFT displays? With the jetBook they’re making a come back, which means instant page-turns. It’s got your standard SD card slot for expension and portrait & landscape modes with 23 hours of battery life on, get this, standard AA batteries. So when it dies in the airport you’ll be back up and running with four fresh cells. The battery compartment on the back has a nice grip to it, perfectly balancing the reader in your hand.

Seeing as Ectaco is an electronic dictionary company it also features multi-language dictionaries and comes pre-loaded with the CIA World Factbook and a plethora of free books.

We’re told it runs Linux. Hopefully we’ll get one in soon for some happy hacking.

Nokia’s n900 — the “N” stands for nerdphone

While it’s been on the market since November, it was good to finally get the Nokia N900 in my hands. The specs are what you’d expect from the company that creams everything but the kitchen sink into their products. 600 MHz ARM, 800×480 3.5″ touchscreen, 5 MPX camera, etc, etc. This of course gives the nerdphone some girth, weighing in at nearly a half-pound and 0.7 inches thick. Still, if you’re looking for a true Linux phone this featureful fatty delivers. Maemo 5 Linux is based on Debian. That means apt-get install prboom will result in some open source Doom action. The best news we gleaned from their booth was their commitment to the platform. We had heard some rumors of the N900 being the last Maemo based device, but we’re assured the platform will continue to grow. We’re looking forward to their Ovi app store to launch but until then there are plenty of apps and SDK options in the Maemo community. Pony tail and neckbeard optional.

On this episode of Hak5 Darren joins Jenn Cutter in Toronto to talk IP Spoofing, Tethering Terms of Service, World of Goo mods, Linux Drive Encryption, 13″ Ultralight notebooks and more.

Download HD Download MP4 Download XviD Download WMV

Tethering TOS and IP Spoofing

Brice writes “Thanks for showing how to tether Droid with Ubuntu. I use them both quite often.
I was wondering if tethering the Droid is against the TOS/Verizon contract.”

Well Brice, technically it may be a violation of your carriers terms of service. I know at least with Verizon’s Wireless business accounts there is an additional fee, around $30/mo I believe, for tethering with a smartphone like a blackberry.

I can also say from personal experience having tethered since 2001 on both Sprint and Verizon, that as long as you stay under the 5-gig cap you should be ok. Programs like June Fabrics PDAnet allow one to tether on most platforms and, from what I hear from my telco buddies, the carrier can’t tell the difference between the traffic originating from the phone or your laptop. I haven’t heard any horror stories of penalties for using such application however I’d be curious to hear from our audience if such a thing has happened in the past.

Kuroha write “I want to use Spotify, the new music service, but I keep getting this error:
Unfortunately, due to licensing restrictions we are not yet available in your country. We understand that you are currently in United States. How do I spoof my IP so it looks like I’m in Finland?”

Kuroha, there is a misconception about IP Spoofing that’s simply summed up by saying this. The source address of your computer is part of the IP packet header. There are plenty of programs out there that will let you spoof this source port, including our favorite tool nmap. However, like a return address on postage, unless you’re in a position to listen to the replies to your spoofed packets (such as on a local network) you aren’t going to get anything useful back from the server.

What you’re more likely referrencing isn’t IP Spoofing as much as it is simply bouncing your traffic off a server in another country — typically done to anonymize Internet traffic or for secure tunneling on untrusted networks. The SSH tunneling with dynamic SOCKS proxies we’ve been talking about recently will do the trick. It’s just a matter of finding a cheap shell, VPS or other server that allows tunneling in the country of your choosing.

Don’t forget this month’s LAN Party is Left 4 Dead 2. We’ll be playing at game.hak5.org Saturday and Sunday, January 2nd and 3rd. Hope to see you there!

World of Goo Mods

Recently I’ve been playing a lot of World of Goo. It’s an amazingly simple and fun game. I’ve been playing on the Wii but soon after arriving in Toronto Jenn Cutter picked up the title for her tablet and has been dabbling with the mods.

If you’re interested in making your own levels, or downloading fan-created levels and other mods be sure to check out GooFans.com — they also have a great forum on modding.

This week’s trivia question is: “World of Goo developers shares the same open source physics engine as what 2007 first-person shooter?” Answer at hak5.org/trivia and be entered to win Pronobozo‘s album Zero=One=Everything.

Easy Linux drive encryption with Cryptsetup

When it comes to Linux, I love super user friendly and powerful utilities. This is one such tool. Since the 2.6.4 kernel drive encryption has been built in, and this tool cryptsetup makes setting it up a breeze. Follow along in this tutorial as I keep my secret thumb drive free from prying eyes.

I’ve gotta give props to Peter Savage for sending this my way. Check out his SciFi fantasy novel Emblem Divide — it’s wicked good.

Wallpaper Contest: Best 2010 “New Years” Hak5 Wallpaper! Get creative and submit your wallpaper to Hak5.org/forums under the Community Images board.

Ultralight Notebooks

Chris writes: “I was wandering if you could suggest a laptop that is lightweight, long battery life, 13.3 inch screen, with Win 7. Budget of $1000″

Chris, I recently did just this research. I was looking for a notebook to edit the show on the go — which isn’t easy considering the heaft and hunger of those AVCHD video files. If you’ve been watching the show for a while you also know I’m the netbook boy. First with the 7″ eeePC, then the 9″ Aspire One, and more recently the 10″ Nokia Booklet 3g. The next step up to get a “real CPU” is 13.3″ — a sweet spot of performance and portability.

What I found was that ultra-light, ultra-long battery life is in. These sweet new Consumer-Ultra-Low-Voltage (culv) chips from Intel and AMD are sexy. I thought I would need a 35 watt Core i7, or at least a 25 watt 2.2GHz or faster Core2Duo to edit on the go — but I lucked out with the 10 watt 1.3ghz SU7300 Core2Duo chip from Intel.

The video editing performance of the ASUS UL-series notebook I ended up with is aided by hardware accellerated video processing in the GMA 4500 M HD. AVC, VC1 and h.264 decoding are offloaded to the graphics chip. In Windows 7 Home Premium I’m able to playback 17mbps AVCHD in WMP using only 20% CPU. Not bad at all.

So if you’re willing to live without an optical drive an ultralight notebook may be the best choice for you. The performance seems enough and the battery life is steller. I’ve seen prices in the $650 – 900 range so take a look at the ASUS UL, Acer Timeline, Dell Inspiron Z, Samsing X and Lenovo U series notebooks. Just be sure to get a Core 2 Duo — I’m not reading great things about the Core 2 Solo part. SU7xxx and SU9xxx seem to be where it’s at. For now. We’ll likely see a lot more of these slim buggers at CES.

I want to give a special thanks to our crew for being so supportive while I was in hospital. Shannon did a wonderful job of taking care of the hakshop and mailing out all the orders while I was away. Thanks Revision3 for understanding about the late episode, Sentara for their open wifi and hot nurses, and a big thanks to our loyal fans. All of well wishes on twitter, facebook and youtube, the forums and IRC brightened my day every day. And DigiPirate, thanks for the awesome USB Dalek Webcam. Exterminate!! Exterminate!!

When it comes to recovering encryption keys from memory nobody has a more intriguing method than Princeton University researchers. We explore a method known as the “Cold Boot Attack”. Plus, a clever DirectX injecting UI widget for your PC games that means the end of ALT+Tab.

Download HD Download MP4 Download XviD Download WMV

When it comes to recovering encryption keys from memory nobody has a more intriguing method than Princeton University researchers who pioneered what is known as the Cold Boot Attack.

Their paper, Lest We Remember: Cold Boot Attacks on Encryption Keys debunks the popular assumption that RAM modules lose their contents when power is lost. As it turns out the degredation of memory can be a matter of seconds to minutes at room temperature. Furthermore this degredation can be slowed by freezing the memory module.

The researchers go on to outline several methods for copying memory from a reset computer or extracted RAM module. Princeton University’s Center for Information Technology Policy site maintains the paper, videos, and source code from the research.

The USB / PXE Imaging tool in combination with the AES Key Finding tool are a powerful combination. In this week’s show we discuss and demo these tools in action.

We also touch on the McGrew Security RAM Dumper and Foremost.

After laying the ground work for this attack I’ll be back in studio next week with more in depth demos and answers to your questions. Please send your feedback and questions along to feedback@hak5.org.

–Darren Kitchen

PlayXPert is a unique in-game overlay for PC and MMO games, incorporating the popular use of social media and the web with the importance of impressive FPS and un-distubed gameplay. PlayXPert lets you play your game without ever having to Alt-Tab out of the game by downloading the small widgets and customizing your opacity, widget settings, and key bindings. You can see it for yourself at their site: PlayXPert.

–Shannon Morse

Also don’t forget about our first ever official Hak5 Meetup at Busch Gardens Williamsburg on August 15th. Find all the details at hak5meetup.squarespace.com or RSVP on Facebook.

In this season premiere episode of Hak5 Mubix joins us to talk about what’s new in Maltego, an open source forensics and intelligence gathering tool. Shannon rocks out with Audio surf, and Darren heads downtown to the coffee shop to own a wireless network with a pineapple. Grab some hax0rflakes ’cause the bricks are gone and we’re back!
[ MP4 | XviD | WMV ]

Production Note

Video issues will be resolved by 403. We’re using new equipment and didn’t catch a nasty bug in our system until after the second shoot

Watch

Show Notes

Wi-Fi Pineapple

Why target individuals on a wireless network when you could have them come to you. Darren talks about the Jasager project, a small portable honey pot with a hunger for clients based on the La Fonera router. http://www.fon.com. Download Jasager.

Maltego

Mubix heads down to show us some fun new features in the open source forensics and intelligence gathering tool Maltego. Download at http://www.paterva.com or find in the latest version of BackTrack at http://www.remote-exploit.org. Read more in Mubix’s Maltego article at room362.

Audio-Surf

Shannon reviews the IGF award winning music game by Invisible Handlebar. Audio-Surf is like the result of F-Zero and Guitar Hero hooking up with the ability to import your own music. Single, 2-player and co-op modes make this highly addictive game one of our favorites. Available through steam at www.audio-surf.com

LAN Party

We’ll be hosting our first LAN Party this season all day Saturday, September 20th at game.hak5.org. Join in for some Counter-Strike: Source action. We’ll be shooting two episodes back to back that day so feel free to hit up the setcam at http://hak5.org and watch as we fumble lines and try not to team-kill.

In this episode we head to Washington DC for Shmoocon, the only security conference with foam projectiles. We converse with Renderman about hacking and con-going. Scott Moulton provides insight on recovery and forensics with solid state disks. Mati Aharoni aka Muts tells us all about Backtrack and offensive-security. Dan Griffin debuts some new security tools for Vista. David Hulton aka H1kari talks about his research intercepting and cracking GSM traffic. And Chris Compton & Co bring us the latest from Hack or Halo

Plus this month’s trivia and a contest sure to get your lolz on.

Sponsors

It used to cost a fortune to protect your site with an SSL Cert. Thankfully, GoDaddy.com changed all that. You can get a standard SSL cert from Go Daddy for just $29.99 a year. They have the same basic specs you’d find on other certs – 256-bit encryption, 99% browser recognition, all that – but for about 80% less than the competition. Now you’ve got no reason to leave your data exposed. Grab an SSL cert from GoDaddy.com now for just $29.99. And save 10% on Domains and SSL certs with coupon code HAK.

Get awesome web hosting from the pros at Dreamhost and receive $25 off your order when you enter coupon code HAK5! Plans start at $7.95/mo including 500 GB storage, 5 TB bandwidth, and one-click installs of popular software like WordPress, phpBB, and MediaWiki.

In this special episode of Hak5 the crew heads to Washington DC for ShmooCon, the only annual security conference with complementary foam balls. We start by talk to Bruce Potter, one of the conferences organizers, about all things Shmoo. We also speak to Billy Hoffman about Jikto, JavaScript and XSS. Eoin Miller and Adair Collins tell us all about Cachedump and the dangers of cached domain credentials. Ken Caruso gives us a tour of the Shmoocon NOC and we see how network security is done at a hacker con. Jordan and Wes give us the details on the Hack or Halo competition while Paul tries his luck with the sniper rifle. Scott Moulton talks to us about recovering dead hard drives and Babak tells us about lock picking and the TOOOL organization. We even run into some Hak5 fans, Ryan and David, who built a rockin� Wii duck hunt box at the Hacker Arcade. Plus all of the usual fixings including the details on this months trivia, poll, LAN party, and a special web 1.0 contest sure to bring back the blink tag.

Sponsors

Get awesome web hosting from the pros at Dreamhost and receive $25 off your order when you enter coupon code HAK5! Plans start at $7.95/mo including 500 GB storage, 5 TB bandwidth, and one-click installs of popular software like WordPress, phpBB, and MediaWiki.

Keep your personal information away from spammers, hackers and your crazy ex-evilserver. Private Domain Registration from GoDaddy.com protects your privacy by keeping your address, phone number and more out of the public database. Get an additional 10% on your order when you enter coupon code HAK.

In this episode of Hak.5 Wess builds a mini arcade cabinet for under $100, Harrison attacks SSL with Whoppix, Darren defends himself by setting up a VPN server on XP, and Jon & Harrison take on buffer overflows with beer. Plus an interview with a Goldeneye Source developer, exclusive in-game video, and more Microshaft than you can wave a rounded IDE cable at. Special guest intro by Jenn Cutter from OpenAlpha and new theme music by Ashley Witt.

Download

Download Xvid

Watch on Youtube

Length: 34:30

In this pilot episode of Hak.5 we test to see if the speed at which you war drive affects your ability to pick up access points. We also show you how to control your lights from an Internet enabled cell phone, kill remote windows processes, modify the gamecube to enable DVD playback, and custom paint your PC case. Plus a Windows XP installation tip everyone should know.
 

Download Xvid

Watch on Youtube

Length: 26:13