topbanner_forum
  *

avatar image

Welcome, Guest. Please login or register.
Did you miss your activation email?

Login with username, password and session length
  • Saturday September 19, 2026, 12:30 pm
  • Proudly celebrating 15+ years online.
  • Donate now to become a lifetime supporting member of the site and get a non-expiring license key for all of our programs.
  • donate

Recent Posts

Pages: prev1 ... 97 98 99 100 101 [102] 103 104 105 106 107 ... 471next
2526
...adapt the communication system to implement covert and stealthy communications by utilizing the near ultrasonic frequency range.

Ah, so may be dogs can hear what's going on...yet another way they can help us!

Funny you should say that. It's already been proposed that "covert acoustic network sniffing dogs" be added to the cadre of pooches that sniff for drugs, explosives, electronics, and trapped human bodies.

Figure if the DHS (along with that dolorous brotherhood of other tri-letter US security agencies) think they can use this as an excuse to pry yet another half-billion out of Congress for a "pilot program," it's a done deal already.

The dogs will (of course) be told to ignore any data originating form American citizens unless specifically directed to do so. Failure to comply will result in a very stern look and no cookie...IF they're caught.

dog2.jpg
    I found it Boss! Here's their main torrent feeder!!!
 ;D
2527
No longer any need to speculate or wonder!  ;D Here's the paper by researchers Michael Hanspach and Michael Goetz on engineering a transmission vector that can bridge the air gap. It's been published by The Journal of Communications:

On Covert Acoustical Mesh Networks in Air

Michael Hanspach and Michael Goetz
Fraunhofer FKIE, Wachtberg, Germany


Abstract—Covert channels can be used to circumvent system and network policies by establishing communications that have not been considered in the design of the computing system. We construct a covert channel between different computing systems that utilizes audio modulation/demodulation to exchange data between the computing systems over the air medium. The underlying network stack is based on a communication system that was originally designed for robust underwater communication. We adapt the communication system to implement covert and stealthy communications by utilizing the near ultrasonic frequency range. We further demonstrate how the scenario of covert acoustical communication over the air medium can be extended to multi-hop communications and even to wireless mesh networks. A covert acoustical mesh network can be conceived as a botnet or malnet that is accessible via nearfield audio communications. Different applications of covert acoustical mesh networks are presented, including the use for remote keylogging over multiple hops. It is shown that the concept of a covert acoustical mesh network renders many conventional security concepts useless, as acoustical communications are usually not considered. Finally, countermeasures against covert acoustical mesh networks are discussed, including the use of lowpass filtering in computing systems and a host-based intrusion detection system for analyzing audio input and output in order to detect any irregularities.

Index Terms—malware, network covert channels, wireless mesh networks, ultrasonic communication

Cite: Michael Hanspach and Michael Goetz, "On Covert Acoustical Mesh Networks in Air," Journal of Communications, vol. 8, no. 11, pp. 758-767, 2013. doi: 10.12720/jcm.8.11.758-767

Links:

Journal of Communications abstract page here.

Article (PDF) direct link here.

Interestingly (but not surprisingly) Linux already has some very powerful resources to deal with this new type of threat. From the paper:

If audio input and output devices cannot be switched off, implementation of audio filtering options may be an alternative approach to counter maliciously triggered participation in covert networks. In Linux-based operating systems, a software-defined audio filter can be implemented with ALSA (Advanced Linux Sound Architecture) in conjunction with the LADSPA (Linux Audio Developer’s Simple Plugin API) ...

Add in the relative ease of developing solutions, plus the large community of contributors, and it looks like Linux may be in better shape than most to resist this cyber-siren's call. Especially since so many in the Linux community see things like this not only as an affront, but also as a challenge.

Tux and his team sez: Bring it on!

tux.jpg

 8)
2528
Non-Windows Software / Re: New Linux magazine startup campaign on Indiegogo
« Last post by 40hz on December 04, 2013, 03:33 PM »
Update: As of 12/04 they now have £75,782 of the £90,000 goal - with 19 days to go. Fingers crossed! :Thmbsup:
2529
Non-Windows Software / Re: LINUX: Linux Mint 16 "Petra" just released
« Last post by 40hz on December 04, 2013, 03:28 PM »
Not that a new version of LM will fix wifi issues necessarily but may be I should burn 16 and see if it is better than 13...

Interesting...one of the first things that swayed me towards Mint as a general purpose and new-user distro was how well it worked with wifi. At least for me. Guess it's yet another example of how YMMV when it comes to Linux...

2530
From the folks over at FOSS Force:

.

... Let’s deviate briefly into the world of super-computers. You take a bunch of discrete systems, with their state-of-the-art hardware, and you create a super-entity that exceeds the individual components by several orders of mangitude. And you use a super kind of glue to bind all of them together. Apparently, that glue is called Linux, or at least, in some 480 odd cases out of 500, it will be called that.

The simple reason why Linux is used in this crazy world of clusters and grids is in the sheer extensibility, flexibility and inherent openness of the operating system that allows subverting the finest hardware to your will, well beyond the original intentions and capabilities of the their vendors, y’know, the market leaders really.

Now, try to project this reality onto the gaming industry. What can possibly happen if you gain the ability to super-glue the graphics hardware with Linux? Not just any one single server or any one overclocked and SLI-ed desktop gaming rig. What happens when you achieve control, connectivity and usability on the scale of thousands and millions?

What could your games of the future be like, if you can bunch the best hardware with the best operating system, or let’s say, the most potential-worthy operating system? What happens if you enhance the closed-source architecture of your best graphics card with a kind of supervisor technology based on Linux?

The gaming industry seems like the best candidate for this kind of experiment. It sure might happen and the first attempts by the Valve Corporation at creating SteamOS is a good indication of a possible future trend. Linux itself may or may not be the right answer for this pseudo-philosophical challenge, but it surely is your easiest bet. It’s not about what the future gaming console might look like. It’s not about how good the drivers will be. It’s about creating the next level of technology that will spearhead future innovation. All for the sake of entertainment...


Read the full article here.
2531
Non-Windows Software / Re: LINUX: Linux Mint 16 "Petra" just released
« Last post by 40hz on December 04, 2013, 01:41 PM »
@Dan - I think these may mostly be issues with a specific laptop's hardware.

I have Mint 14 running on a Dell Inspiron where the restart option doesn't work correctly. It always hangs on shutdown. Since I can just do a regular shutdown + hit the power switch to restart (and logoff session works fine) I haven't bothered to try and get to the bottom of it.  

Sometimes you just need to weigh the effort required in light of solving one glitch on one machine. As I get older I get lazier when it comes to my own PCs.
 :-[
2532
Living Room / Re: Does anyone here use Bitcoins?
« Last post by 40hz on December 04, 2013, 12:44 PM »
it's still a definite win for Renegade's "One should tryout Bitcoins" side of the fence.

Yup. And I sincerely hope he'll get the chance to say "Told ya so 40hz!"  ;D
2533
Non-Windows Software / Re: LINUX: Linux Mint 16 "Petra" just released
« Last post by 40hz on December 04, 2013, 12:27 PM »
Thanks for the reminders 40hz - think i might just keep LM as default.
Although i've seen a few complaints on LM blog about problems with Cinnamon 16, it has never been better as far as i can recall!
Everything is basically 100% faster than before. Yes!!

Yeah. That was my impression too. And especially obvious once I took it off a VM and installed it on real iron. In this case, 'real iron' is an HP Pavilion dv7 laptop (i5/8Gb RAM) which I inherited when the original owner (a client) tossed it because the HD went bad. I recovered it (with his permission) from the trash bin it was sitting in. Even got the power brick that went with it. After putting in a nice spankin' new 1TB HD I had sitting on the shelf, I was set to go. And all without me dorking with anything I was currently using.

Haven't had any problems (so far) with the new release or Cinnamon either. Knock wood!

group-dancing-penguins-smiley-emoticon.gif

Woo-Hoo! This beastie (it's huge) just might end up being my new main 'desktop" machine...
 :Thmbsup:
2534
Living Room / Re: badBIOS revisited - it is possible to bridge the airgap after all
« Last post by 40hz on December 04, 2013, 12:19 PM »
There are actually some much shorter variants on that theme ... that I may play with this evening using a VM as a target.

Knock yourself out...or just blow some poor VM off the face of the earth. I sure did when I first learned about that sort of exploit! ;D
2535
Non-Windows Software / Re: LINUX: Linux Mint 16 "Petra" just released
« Last post by 40hz on December 04, 2013, 09:39 AM »
I got to thinking whether remastering the LMDE iso with the latest update applied might be worth considering.

Wow! You're certainly nix-hardcore aren't you? :tellme: ;D

If you have the technical chops, time, and the interest to do something like that, might it make sense to create your own Debian spin? It would probably be easier than trying to reverse engineer what the Mint people did and remaster from there.

2536
Living Room / Re: badBIOS revisited - it is possible to bridge the airgap after all
« Last post by 40hz on December 04, 2013, 09:29 AM »
Zoiks! 20bps is a lot more respectable a speed than previously thought. Even with a high overhead you can still pack a lot of sneaky in a pipe that size.

Yup. Something small. Maybe a fork bomb such as [# {‘s -m (){ :| :& };:] y'know?

(Note: I pooched the above string. It's purely for illustration purposes. It doesn't run as is. :P)

2537
Living Room / Re: Recommend some music videos to me!
« Last post by 40hz on December 04, 2013, 09:20 AM »
@SB - Very much liking Miz Dee! Great arrangement. :Thmbsup: :Thmbsup:
2538
Living Room / Re: What books are you reading?
« Last post by 40hz on December 04, 2013, 09:05 AM »
Black Wings of Cthulhu - 21 Tales of Lovecraftian Horror edited by S.T. Joshi.

cth.jpg

Once again a compendium of modern writing inspired by the characters and themes of H.P. Lovecraft. (I'm on a Mythos binge lately in case nobody's noticed.)

And once again a mixed bag of offerings. Of the twenty-one tales Caitlin Kiernan's Pickman's Other Model (1929) is easily the best of the lot, closely followed by Howling in the Dark by Darrell Schweitzer; and Tempting Providence by Jonathan Thomas.

Less successful (purely as Mythos-inspired tales) but still enjoyable are Ramsey Campbell's The Correspondence of Cameron Thaddeus Nash; and Passing Spirits by Sam Gafford.

Norman Partridge's Lesser Demons, a PA/Mythos mashup, didn't work for me at all. If you pulled out the one tiny allusion to the Mythos found in Lesser Demons, it would read just like any other 'PA narrated from a lone survivor perspective' yarn.

Another flop (IMO) was scifi master Brian Stableford's The Truth About Pickman. Not because it wasn't well written. (It was.) Not because it didn't have a good premise and a solid plot. (It did.) But despite all that, it still missed the boat because Mssr. Stableford makes the mistake far too many writers do when tackling a Lovecraft-type story: They explain far too much!

The real joy of Lovecraft is how he leaves you with a sense of awe and mystery. And always wanting just a little more. Unexplained bumps in the night go largely unexplained. Mysterious texts are alluded to (sometimes even briefly quoted from) but never shown in full. And although Lovecraft may drop dots all over the landscape, he never explicitly connects them. Or gives his reader every dot to work with.

It's a subtle art - giving the reader just enough to go on - but not enough to completely work things out. And that sort of literary miracle working is Lovecraft's art and legacy. Modern horror writers could learn something here if they could just stop hoping for a movie deal long enough to write a good horror novel rather than something that's merely ok but can easily be adapted to film. Film is all about 'visual' whereas Lovecraft and the classic horror genre (as opposed to splatter-shock) is largely about things largely left unseen.

Good book overall. Worth a read if you're an H.P. fan. And the short story format is perfect for trips or when stuck at boring gatherings.

cthu.png
2539
Non-Windows Software / Re: LINUX: Linux Mint 16 "Petra" just released
« Last post by 40hz on December 04, 2013, 07:59 AM »
Now if i can figure out how to make Cinnamon boot second to Windows... boot config is read only and i always have a hard time to remember how to get into root mode. Not easy after 50!

With Ubuntu derivatives there's seldom (if ever) any real need to run as root. At least most times. If you prefix a command with sudo (or gksudo) that will give you temporary admin privileges on anything you do with that command once you enter your password. (Ex: sudo gedit will open the text editor with root privileges.)

Might be easier for you to use Neosmart's EasyBCD as your boot profile manager. It's free for non-commercial and home use. Info and download link here.

 :Thmbsup:
2540
Non-Windows Software / Re: ExplainShell explains those cryptic command options
« Last post by 40hz on December 04, 2013, 06:42 AM »
Thanks E-Man! That's very handy - and a great resource for bringing a new shell user up to speed. :Thmbsup:
2541
Non-Windows Software / Re: LINUX: Linux Mint 16 "Petra" just released
« Last post by 40hz on December 04, 2013, 06:28 AM »
Quick rundown of Mint 16 Cinnamon can be found here. Lots of pretty pictures! :)
2542
Living Room / Re: badBIOS revisited - it is possible to bridge the airgap after all
« Last post by 40hz on December 03, 2013, 10:03 PM »
@x16wda- LOL! Worked for Mr. Draper (aka Cap'n Crunch). It could work for us!  ;D

--------------------

Is that a historical reference?

You betcha! Look here.

john_draper.jpg

John Draper - THE Man! :Thmbsup:
2543
Living Room / Re: badBIOS revisited - it is possible to bridge the airgap after all
« Last post by 40hz on December 03, 2013, 06:27 PM »
^Yeah. My thoughts exactly. An acoustic mesh network sounded intruguing - and useful

 8)
2544
Living Room / Re: What books are you reading?
« Last post by 40hz on December 03, 2013, 03:54 PM »
ok...40hz...what is the source of that awesome Cthulhu illustration?

Google! :)

I've seen it called either Office Space Cthulhu or "Chtulhu wants you to use a spell check."

 8)
2545
Living Room / Re: What books are you reading?
« Last post by 40hz on December 03, 2013, 02:46 PM »
Lovecraft Unbound - an anthology of deliberately modern treatments of Lovecraftian themes, selected and edited by Ellen Datlow.

books.jpg

A 'not bad' collection of new (as in 'inspired by') Lovecraft tales - with some real gems mixed in.

If you're looking for classic Lovecraft, you won't find it here. These are Lovecraft themed stories. Not pastiches or attempts to write a Mythos tale as Lovecraft himself might have written it.

Especially good were Leng by Marc Laidlow; The Crevasse by Dale Bailey and Nathan Ballingrud; Cold Water Survival by Holly Phillips; the absolutely brilliant Houses Under the Sea by (no surprise) Caitlin R. Kiernan. Best however was Sarah Monette and Elizabeth Bear's Mongoose, which is easily the cleverest and most original story in the collection.

Unexpectedly disappointing was long-time Lovecraft admirer Joyce Carol Oates' blatant reworking of the twist in her famous story The Lottery. Ms. Joyce (who we know can write extremely well) provides us only a lame and overly obvious piece called: Commencement.

All in all...not bad.

But I still think the original works of Lovecraft (and some of his circle of contemporaries) were far better.

Cthulhu-Office-Space.jpg

(So does Cthulhu!)
2546
Living Room / badBIOS revisited - it is possible to bridge the airgap after all
« Last post by 40hz on December 03, 2013, 02:07 PM »
This topic came up in an earlier DoCo post started by Renegade here.

puppy.png

It's a far cry from being a viable vector for in-the-wild malware. But researchers in Germany have apparently developed a 'proof of concept' piece of malware that can bridge the "air gap" between unconnected PCs at distances up to 65 feet using the internal speakers and microphone found in most modern laptops - with longer distances possible using an acoustic mesh network made up of previously infected machines.

Full ArsTechnica write-up here.

Scientist-developed malware covertly jumps air gaps using inaudible sound
Malware communicates at a distance of 65 feet using built-in mics and speakers.


by Dan Goodin - Dec 2 2013, 2:29pm EST

Computer scientists have developed a malware prototype that uses inaudible audio signals to communicate, a capability that allows the malware to covertly transmit keystrokes and other sensitive data even when infected machines have no network connection.

The proof-of-concept software—or malicious trojans that adopt the same high-frequency communication methods—could prove especially adept in penetrating highly sensitive environments that routinely place an "air gap" between computers and the outside world. Using nothing more than the built-in microphones and speakers of standard computers, the researchers were able to transmit passwords and other small amounts of data from distances of almost 65 feet. The software can transfer data at much greater distances by employing an acoustical mesh network made up of attacker-controlled devices that repeat the audio signals.

Interesting reading. Especially some of the more knowledgeable comments attached to the main article.

Check it out! 8)
2547
Non-Windows Software / Re: LINUX: Linux Mint 16 "Petra" just released
« Last post by 40hz on December 02, 2013, 07:01 PM »
When the machine in question is broken oir I don't trust its content, booting from ISO seems like a better option -- also when it's someone else's PC...

Yup. That pretty much answered my question. Boot from media it is! ;D
2548
Non-Windows Software / Re: LINUX: Linux Mint 16 "Petra" just released
« Last post by 40hz on December 02, 2013, 12:05 PM »
I tend to use Mint via booting one of its isos, so it'd have been nicer not to have to apply an update after booting from the LMDE iso.

Wouldn't setting it up as a VM image be easier? That way, you could have a tweaked and updated clean image for software testing anytime you wanted.
 8)
2549
Non-Windows Software / *NIX: Watch Netflix with Linux (for beginners)
« Last post by 40hz on December 02, 2013, 11:36 AM »
Note: Netflix is a paid subscription movie service. This set of instructions will allow a Netflix streaming account member to watch Netflix on a browser running under Linux. It will not allow you to watch Netflix hosted movies if you don't already have a user account.
-------------------------------------------------------------------------------------------------



There are a variety of ways to get Netflix to work with Linux. But Jeff Hoogland's recent post on his Thoughts on Technology blog is probably the easiest way to do it.

I pointed a friend to it recently. Unfortunately, my friend is a complete Linux neophyte - and the directions are for Bohdi Linux - and she had a little trouble extrapolating them to work with Linux Mint. So (for her) I put together a set of instructions based in Jeff's article which I thought might also be helpful to other new Linux users here at DoCo.

This is the more generalized set of directions I sent my pal for how to get around Netflix's arbitrary decision to exclude Linux as a qualifying platform for viewing their streaming service:

Step 1 - Check for (or install) a qualifying browser.

     There are only two: Chrome and Firefox. If you don't have one or the other, install one with your distro's package manager. Since I have a purely personal snit going with Google over Chrome (don't ask), the rest of these instructions will assume you're using Mozilla Firefox.

Step 2 - Install Pipelight.

     Netflix uses Microsoft's proprietary Silverlight technology to stream movies. Microsoft does not offer a version of Silverlight that runs on Linux. Fortunately, a duo called the FDS-Team have created a clever bit of software wizardry that gets around that limitation. It's called Pipelight. This is what it's about:

Pipelight: using Silverlight in Linux browsers
16 Aug 2013 21:23 CEST  written by FDS-Team


Today we want to present you our latest project Pipelight, which allows to run your favorite Silverlight application directly inside your Linux browser. The project combines the effort by Erich E. Hoover with a new browser plugin that embeds Silverlight directly in any Linux browser supporting the Netscape Plugin API. He worked on a set of Wine patches to get Playready DRM protected content working inside Wine and afterwards created an Ubuntu package called Netflix Desktop. This package allows one to use Silverlight inside a Windows version of Firefox, which works as a temporary solution but is not really user-friendly and moreover requires Wine to translate all API calls of the browser. To solve this problem we created Pipelight.

Pipelight consists out of two parts: A Linux library which is loaded into the browser and a Windows program started in Wine. The Windows program, called pluginloader.exe, simply simulates a browser and loads the Silverlight DLLs. When you open a page with a Silverlight application the library will send all commands from the browser through a pipe to the Windows process and act like a bridge between your browser and Silverlight. The used pipes do not have any big impact on the speed of the rendered video since all the video and audio data is not send through the pipe. Only the initialization parameters and (sometimes) the network traffic is send through them. As a user you will not notice anything from that "magic" and you can simply use Silverlight the same way as on Windows,...

     Installation isn't difficult - but the exact steps vary depending upon which Linux distro you're using. Fortunately (again!) the FDS-Team has a very complete and clear set of instructions for several Linux distros which can be found here. The majors are all supported.

     Since my friend's PC is running Linux Mint, the instructions for Ubuntu installation work just fine. These instructions will set up a Ubuntu ppa which will allow you to install Pipelight as if it were a part of the regular Linux Mint repositories.

     To do this, open a terminal window and enter (or just copy and paste) the following commands, one line at a time, followed by the enter key.

      sudo apt-add-repository ppa:ehoover/compholio
     sudo apt-add-repository ppa:mqchael/pipelight
     sudo apt-get update


Once the above two ppas have been installed, it's a simple matter to add Pipelight and the necessary components needed to watch Netflix.

First you need to install Pipelight and its dependencies. Enter or paste the following command in the terminal window and hit enter:

     sudo apt-get install pipelight-multi

This can take a while depending upon how many required bits of software are already installed on your PC. (On my friend's machine it took about 5 minutes using a fairly slow DSL connection.) Note: if the Microsoft TrueType core fonts aren't already installed on your machine, Pipelight will install them. But you'll be required to agree to a Microsoft license notice (don't worry, it's completely legal) before the installation takes place.

Once Pipelight has installed, you need to enable it to run Silverlight. To do that enter or paste the following command in the terminal window and hit enter:

     sudo pipelight-plugin --enable silverlight

That's it for the 'hard' part!

Step 3 - Install an agent switcher in your browser to make Netflix think it's talking to a Windows PC.

     Your browser is ratting you out every time it connects to something. It informs the site what OS and browser you're using along with several other things. Netflix refuses to run on Linux due to Linux not making the required obeisances to the dark gods of DRM. An agent switcher gets you around that by lying to the website, and reporting it's using the browser and running under the OS you tell it to.

     Pipelight works with some (but not all) agent switchers. So it's important to select a compatible one. There's more info about that on the Pipelight installation page. If you'd rather just get on with it and not worry about the details, a Firefox add-on called User Agent Override works perfectly. Install it under Firefox and you're set to go.

     Once it's installed, restart your browser and select Firefox 2x/Windows from the dropdown menu button like so:

menu.png


And that's it! Web on over to Netflix, log in with your account credentials, and watch a movie.
 :Thmbsup:


2550
Non-Windows Software / Re: LINUX: Linux Mint 16 "Petra" just released
« Last post by 40hz on December 01, 2013, 08:18 PM »
Nice!



Anyone know if there will be any more work on the Debian-based flavor?

IIUC, LMDE works off a semi-rolling release model that uses Mint created update packs based on Debian's "testing" repositories. So there really aren't specific LMDE versions like there are for the Ubu-based flavors of Mint. The last LMDE update pack (#7) was issued around the end of September of this year, so it looks to be still active.
Pages: prev1 ... 97 98 99 100 101 [102] 103 104 105 106 107 ... 471next