Notices by Bob Jonkman (bobjonkman@gs.jonkman.ca), page 13

Bob Jonkman (bobjonkman@gs.jonkman.ca)'s status on Monday, 07-Jan-2019 01:45:04 UTC Bob Jonkman
- Strypey
From that "security" advice: "Use a #Bluetooth keyboard for easier typing" https://hackaday.com/2018/12/30/finding-bugs-in-bluetooth/ Jiska and Dennis pwn all the Bluetooth things.
In conversation Monday, 07-Jan-2019 01:45:04 UTC from gs.jonkman.ca permalink
Attachments
1. 35C3: Finding Bugs in Bluetooth
  
  By Elliot Williams from Hackaday
  
  [Jiska Classen] and [Dennis Mantz] created a tool called Internal Blue that aims to be a Swiss-army knife for playing around with Bluetooth at a lower level. The ground for their tool is based in three functions that are common to all Broadcom Bluetooth chipsets: one that lets you read arbitrary memory, on that lets you run it, and one that lets you write it. Well, that was easy. The rest of their work was analyzing this code, and learning how to replace the firmware with their own version. That took them a few months of hard reversing work.
  
  In the end, Internal Blue lets them execute commands at one layer deeper — the LMP layer — easily allowing monitoring and injection. In a series of live (and successful!) demos they probe around on a Nexus 6P from a modified Nexus 5 on their desk. This is where they started digging around in the Bluetooth stack of other devices with Broadcom chipsets, and that’s where they started finding bugs.
  
  As is often the case, [Jiska] was just poking around and found an external code handler that didn’t do bounds checking. And that meant that she could run other functions in the firmware simply by passing the ~~address~~ handler offset. Since they’re essentially calling functions at any location in memory, finding which functions to call with which arguments is a process of trial and error, but the ramifications of this include at least a Bluetooth module crash and reset, but can also pull such tricks as putting the Bluetooth module into “Device Under Test” mode, which should only be accessible from the device itself. All of this is before pairing with the device — just walking by is sufficient to invoke functions through the buggy handler.
  
  All the details of this exploit aren’t yet available, because Broadcom hasn’t fixed the firmware for probably millions of devices in the wild. And one of the reasons that they haven’t fixed it is that patching the bug will disclose where the flaw lies in all of the unpatched phones, and not all vendors can be counted on to push out updates at the same time. While they focused on the Nexus 5 cellphone, which is fairly old now, it’s applicable to any device with a similar Broadcom Bluetooth chipset.
  
  Aside from the zero-day bug here, the big story is their Bluetooth analysis framework which will surely help other researchers learn more about Bluetooth, finding more glitches and hopefully helping make Bluetooth more openly scrutinized and more secure. Now anyone with a Raspberry Pi 3/3+ or a Nexus 5, is able to turn it into a low-level Bluetooth investigation tool.
  
  You might know [Jiska] from her previous FitBit hack. If not, be sure to check it out.
Bob Jonkman (bobjonkman@gs.jonkman.ca)'s status on Monday, 07-Jan-2019 01:17:32 UTC Bob Jonkman
- snowdusk
- iiogama
Since @Snowdusk is offline tonight, some of us are listening to @iiogama's archive from yesterday. https://archives.anonradio.net/201901051800_iiogama.mp3 Join us for a chat in COM!
In conversation Monday, 07-Jan-2019 01:17:32 UTC from gs.jonkman.ca permalink
Attachments
1. Untitled attachment
Bob Jonkman (bobjonkman@gs.jonkman.ca)'s status on Wednesday, 21-Mar-2018 21:58:56 UTC Bob Jonkman
in reply to
- Bob Jonkman
Gotta go, cafe is closing. Poor sucker finally has a chance to escape slick dude. #ButProbablyTooLate

In conversation Wednesday, 21-Mar-2018 21:58:56 UTC from gs.jonkman.ca permalink
Bob Jonkman (bobjonkman@gs.jonkman.ca)'s status on Wednesday, 21-Mar-2018 21:57:22 UTC Bob Jonkman
in reply to
- Bob Jonkman
Slick dude is a hulking football linebacker type, while poor sucker is probably a jockey. #NotAFairFight

In conversation Wednesday, 21-Mar-2018 21:57:22 UTC from gs.jonkman.ca permalink
Bob Jonkman (bobjonkman@gs.jonkman.ca)'s status on Wednesday, 21-Mar-2018 21:54:06 UTC Bob Jonkman
in reply to
- Bob Jonkman
Aah, #NowIGetIt! Slick dude is trying to recruit poor sucker into a multi-level marketing scheme. #RightBothTimes

In conversation Wednesday, 21-Mar-2018 21:54:06 UTC from gs.jonkman.ca permalink
Bob Jonkman (bobjonkman@gs.jonkman.ca)'s status on Wednesday, 21-Mar-2018 21:45:39 UTC Bob Jonkman
in reply to
- Bob Jonkman
Oh, #WaitASec, maybe slick dude is the manager of a local store conducting a hiring interview with the poor sucker. #DontTheyHaveOfficesForThat?

In conversation Wednesday, 21-Mar-2018 21:45:39 UTC from gs.jonkman.ca permalink
Bob Jonkman (bobjonkman@gs.jonkman.ca)'s status on Wednesday, 21-Mar-2018 21:38:07 UTC Bob Jonkman

Sitting in a cafe listening to some slick dude at the next table trying to scam some poor sucker out of his life's savings.

In conversation Wednesday, 21-Mar-2018 21:38:07 UTC from gs.jonkman.ca permalink
Bob Jonkman (bobjonkman@gs.jonkman.ca)'s status on Sunday, 07-Jan-2018 22:52:28 UTC Bob Jonkman

More reactions to #Meltdown and #Spectre: http://www.commitstrip.com/en/2018/01/04/reactions-to-meltdown-and-spectre-exploits/ https://gs.jonkman.ca/attachment/41035
In conversation Sunday, 07-Jan-2018 22:52:28 UTC from gs.jonkman.ca permalink
Attachments
1. Untitled attachment
  https://gs.jonkman.ca/file/cc6b9d8468bdf1038683f6cbbff7fb8959a37771033a2f595f771d66d1a846d1.jpg
Bob Jonkman (bobjonkman@gs.jonkman.ca)'s status on Thursday, 04-Jan-2018 21:14:42 UTC Bob Jonkman
in reply to
- fediverse
- zoowar
Then #fediphilia must be an unhealthy desire to be part of the !Fediverse. And we're all fediphiles

In conversation Thursday, 04-Jan-2018 21:14:42 UTC from gs.jonkman.ca permalink
Bob Jonkman (bobjonkman@gs.jonkman.ca)'s status on Friday, 22-Dec-2017 06:26:20 UTC Bob Jonkman
in reply to
- Stephen Sekula
Prof. Lippert says he has plans for better medical imaging, but I'll bet his 3-D digital light photoactivatable dye display is first used to implement Rule 34

In conversation Friday, 22-Dec-2017 06:26:20 UTC from gs.jonkman.ca permalink
Bob Jonkman (bobjonkman@gs.jonkman.ca)'s status on Sunday, 19-Nov-2017 23:05:47 UTC Bob Jonkman
- Bob Jonkman
Also, added #Wire to https://sobac.com/wiki/List_of_Free_Software_Social_Media_platforms
In conversation Sunday, 19-Nov-2017 23:05:47 UTC from gs.jonkman.ca permalink
Attachments
1. Untitled attachment
Bob Jonkman (bobjonkman@gs.jonkman.ca)'s status on Sunday, 19-Nov-2017 20:21:18 UTC Bob Jonkman
- GNU Social
- Annah
To be fair, the !StatusNet network that Evan was running became unmanageable -- it cost too much to run, and I think Evan was funding most of it himself (although there were/are a number of paying #StatusNet customers). Evan developed #PumpIO to reduce the number of servers needed to run a federated network, and purposely kept the UI to a minimum to encourage federation. Sadly, that didn't work. Porting identi.ca from StatusNet to PumpIO was intended to introduce people to PumpIO as well as reduce Evan's costs. That partly worked; identi.ca is alive and well as a community, although much reduced from its glory days around 2013. But the #bifurcation did spawn a large number of new StatusNet / !GNUsocial instances, so that was a good thing too. But you're right in that PumpIO never gained widespread traction, the proof of which is in its lack of continued development. In that respect #GNUsocial and !OStatus are more successful than PumpIO

In conversation Sunday, 19-Nov-2017 20:21:18 UTC from gs.jonkman.ca permalink
Bob Jonkman (bobjonkman@gs.jonkman.ca)'s status on Sunday, 05-Nov-2017 22:19:51 UTC Bob Jonkman
- Bob Jonkman
Also via #Twitter https://twitter.com/mrjohnnymac18/status/927295467612000256 https://gs.jonkman.ca/attachment/20221
In conversation Sunday, 05-Nov-2017 22:19:51 UTC from gs.jonkman.ca permalink
Attachments
1. Untitled attachment
  https://gs.jonkman.ca/file/c3277052e0562a38aef6f7785dd50535c513e026e340f6daafc28cc816381901.jpg
Bob Jonkman (bobjonkman@gs.jonkman.ca)'s status on Wednesday, 01-Nov-2017 18:17:59 UTC Bob Jonkman
- Ocean Man 🌊
I love #CampusRadio. Also #SDF's #Anonradio at http://anonradio.net and my local community station @RadioWaterloo@twitter.com https://soundfm.ca/
In conversation Wednesday, 01-Nov-2017 18:17:59 UTC from gs.jonkman.ca permalink
Attachments
1. Untitled attachment
2. No result found on File_thumbnail lookup.
  
  Radio Waterloo - CKMS 102.7 FM
  
  from Radio Waterloo - CKMS 102.7 FM
Bob Jonkman (bobjonkman@gs.jonkman.ca)'s status on Tuesday, 31-Oct-2017 20:33:51 UTC Bob Jonkman
in reply to
- Surveillance
- HN Tooter
What did that Reddit user expect? Putting sensitive info in a Google sheet is dumb, and sharing the link on Facebook is dumber. These companies exist to mine your data, then sell the metadata to the highest bidder. They're not "search engines" or "social media platforms" but !surveillance agencies that are monetized though advertising.

In conversation Tuesday, 31-Oct-2017 20:33:51 UTC from gs.jonkman.ca permalink
Bob Jonkman (bobjonkman@gs.jonkman.ca)'s status on Tuesday, 24-Oct-2017 15:33:19 UTC Bob Jonkman
- LinuxWalt (@lnxw48a1) {3EB165E0-5BB1-45D2-9E7D-93B31821F864}
And that functionality (mounting a .tar file) exists in the package 'archivemount' https://www.linux.com/news/mounting-archives-fuse-and-archivemount
In conversation Tuesday, 24-Oct-2017 15:33:19 UTC from gs.jonkman.ca permalink
Attachments
1. No result found on File_thumbnail lookup.
  
  Mounting archives with FUSE and archivemount
  
  from Linux.com | The source for Linux information
  
  The archivemount FUSE filesystem lets you mount a possibly compressed tarball as a filesystem. Because FUSE exposes its filesystems through the Linux kernel, you can use any application to load and save files directly into such mounted archives. This lets you use your favourite text editor, image viewer, or music player on files that are still inside an archive file. Going one step further, because archivemount also supports write access for some archive formats, you can edit a text file directly from inside an archive too.

After

Public

Notices by Bob Jonkman (bobjonkman@gs.jonkman.ca), page 13

Internal Server Error

User actions