Root Compromise

Hory carp! Looks like H.D. Moore linked to my Hacker Handle Generator and it’s all over the twitterverse now.

Follow my pointless updates too!

i don’t come here any more. i should decide what to do with this.

Seriously the last year has flown by like no other I’ve ever experienced. Maybe it’s the whole time moves slower for young people and the older I get the faster it will go thing finally starting to happen. It’s here again already, time to descend upon Vegas with a bunch of good friends and knock out another Black Hat/Defcon combo.

I don’t update a lot because I don’t like to talk about my personal life a ton, though Twitter has gotten me to lighten up a bit. However, during times like Black Hat I try to update more. So once again I’ll be rtying to keep a running log of events as they happen via this page and Twitter of course. It’s hard sometimes, when the parties go till 3am, to want to go back to the hotel room and write up a summary of the days events, but I’ll give it another go. Lets see what happens.

As the title says, I think I saw the Google Street View car out the other morning. I was just driving to work and noticed it in front of me at as I pulled up to the stoplight, and the California plates made me wonder. Of course being the geek that I am I pulled out my phone and snapped a picture, two actually but the second one is tiny for some reason. Anyway, I thought it was kind of cool to see it in person and I’m looking forward to seeing, when that road is uploaded, if my car is on the road.

We had a Dc801/2600 meeting on Friday and it turned out pretty well. Kampf was talking on IRC a few weeks ago about stopping by the meeting location last month and being the only one there, which is sad. So influx, kampf, and I decided we would show up in March and I said I would organize the meeting if people would come. When I started out I thought if we could get 10 people this month that would be nice, well we got 21. Not bad at all.

I brought the locks, picks, and pikstation mentioned below and invited some folks from the lockpicking101.com forums so that gave us something to do. MBI from LP101 showed up with a bunch of locks an picks as well so between the two of us we were able to drop sufficient knowledge to get people started picking. If I’m not mistaken everyone that attempted to pick a lock was successful. MBI also brought a few inexpensive pick sets with him that he sold to people at cost so they could get practicing. I hope a few others catch the lockpicking bug as much as I did. It was a great sight seeing 20+ people all picking locks, I hope to replicate it again next month.

My new lock picking gear came today. I was glad that it did because there’s going to be a DC801/2600 Meeting on Friday and I wanted to do a lock picking primer at the meeting. I’m a fan of all types of security, and the bypassing thereof, so naturally locks fall into that category, and while I dabbled here and there over the years I’ve been dedicating significantly more time and effort into honing my skills. And as the newest member of TOOOL I figure it’s time to share that knowledge.

So I picked up a PikStation+Plus with the Deluxe TriPik Holding Fixture and a bunch of 5-pin practice locks for the fixture. Five practice locks that have a Kwikset keyway, three with the Schlage keyway, and one cutaway practice lock with a Schlage keyway to help illustrate what’s going on in the lock as you’re picking, or just inserting a key.

I was really stoked when my picks I ordered came as well. I ordered a few new picks from Peterson International so I’d have enough for everyone to use if people wanted to try their hand at picking a lock, plus I got some new picks and that’s never a bad thing. I picked up 2 Hooks, 2 Triple Rakes, 2 Peterson Reach, a Peterson Gem, and a Half Diamond pick all with rubber handles from their Carbon Spring Steel individual picks section. The picks end up costing $4.25 a piece because they’re good quality and the rubber handles make them cost a bit more but I think it’s worth it. I’ve used the textured handled picks and they aren’t bad but rubber is just a lot nicer grip. While I haven’t use the plastic handle picks I’m still going to talk out of my ass, or at least assume, and say the rubber handles are nicer. I’ve held plastic before, it didn’t grip well.

I’ve e-mailed myself the Utah laws on possession of burglary tools just in case; so this Friday I’m going to head over to the meeting with a backpack full of Cylinders, Padlocks, and Picks, and hopefully teach someone something. If I can plant the picking bug on just one more person, than that’s good enough for me.

I decided to unlock my phone in case I wanted to pick up a prepaid SIM or something when I’m in Europe in March. It ended up being a pretty painless process so I was pleased with that. I knew that your cellular provider was supposed to let you do it due to that FCC ruling awhile back, I just thought they’d make you jump through more hoops to do it.

I just called up T-Mobile and they transferred me over to their Blackberry Services department, the girl just wanted to know why I wanted to unlock my phone. I told her I was heading overseas and she said “Okay, I just need to verify some information and we’ll get your unlock code and instructions over to you within 24 hours.” That’s it? Cool.

Here’s what I got 24 hours later…

T-Mobile Sim Unlock Request
Sim Unlock Reference: XXXXXXX
IMEI: XXXXXXXXXXXXXXX

Unlock Code: XXXXXXXXXXXXXXXX

Thank you for taking the time to contact T-Mobile. Below you will see the Instructions for unlocking your Blackberry 8100 Pearl device.

1. Press the Menu key.
2. Scroll to Options and press the trackball.
3. Scroll to Advanced Options and press the trackball.
4. Scroll to SIM Card and press the trackball.
5. Type MEPPD
Note: When typing in MEPPD the letters will not appear on the screen. This step opens up the personalization on the device.
6. Press the Alt key and type MEPP2
Note: When typing in MEPP2 the letters/number will not appear on the screen. This Step opens up the Enter Network MEP code box.
7. Enter unlock code.
8. Press the Enter Key.

Thank You,

Sim Unlock Department
T-Mobile USA, Inc.

I figured I’d post the e-mail here in case anyone had never seen it. One thing they mess up on is telling you to use the Alt key and then type MEPP2, it should be MEPP then use the Alt key to enter the number 2. But meh, use your noodle and you figure that out in about five seconds.

My web host broke and subsequently lost a good half of my Gallery albums. I got most of it fixed and will be restoring over the next 24 hours or so.

Sorry about that. I’m not thrilled either.

I hesitate calling what is essentially upgrading my TiVo “hacking”. The first guy that did it, he hacked his TiVo, I just borrowed his skills; either way I now have room for a lot more shows on it.

I have a TiVo Series 2 Dual Tuner box. I haven’t found the need to drop the coin on an HD TiVo box yet, but someday I’m sure I’ll cave and get one. Anyway, basically all you need to do is grab an ISO of the backup software and use it to boot to linux. You copy over your stuff from your old drive to the new drive and in about an hour or two you’re up and running. Easy as pie.

I picked up a 500GB hard drive from Best Buy, because that’s the largest size they had with an IDE connection, and a #10 and #15 Torx tip screwdriver at Wal-mart. Got home and looked up some instructions on weaKnees and opened up the TiVo. You can buy upgrade kits from them that are about 100% markup from the cost of the drive, but if you do it yourself you can spend the rest of that money on penny candy. Yay Candy! They’re pretty cool though and have all the instructions for DIY and extensive forums if you get stuck. So I went the cheap and capable route and did it myself. I ran into a few snags, one being that the initial ISO I downloaded couldn’t find my CD-Rom drive, but I grabbed the ISO with SATA support and that worked like a charm. It has nothing to do with anything being SATA, it just found my drive. *shrug*

The msftools software included on the CD took about an hour to backup and restore my current 80GB drive to the new 500GB drive and I was in business. It was a hell of a lot easier than I imagined and I could do it again quickly if the need arose. So now I’ve gone from 78 possible hours of TV to up to 560 hours. So instead of saving 5 episodes at a time of “No Reservations” and “Ninja Warrior“, I’m saving 25. Why? I have no idea, I just wanted to do it. I’m sure part of it had to do with my wife and kid’s shows clogging up “my” TiVo; but a lot of it I think is just the geek in me wanting to do it.

What can I say, I’m no good at this. The odd thing is that I come to my own site from time to time like I expect something new to be here.

I’ve been really busy working on my latest book project which is now available for purchase. It’s another book dealing with Juniper Networks products, this time the Secure Access device, or SSL VPN. So I ended up writing about work when I wasn’t at work. Oh well.

After I finished that up I went on an Otaku binge and started watching Anime every night for hours, for several weeks. DeathNote, Code Geass, Naruto, Ghost in the Shell, etc. It’s been nice to be able to spend some time just geeking out for fun. And in there I went back to Tokyo again, the pics are up.

At some point I have to get the pictures from D.C., Amsterdam, Vegas, and Rome up. Maybe I can do some of that this week.

Look at that, something to read when I visit my own site again.