Top all-time · #1956
devttys0.com
Personal blog · devttys0.comsecurityhardwaresystems
devttys0.com is a personal blog at devttys0.com about security, hardware and systems. Since 2010, 38 different Hacker News readers have linked it 57 times, most often “Reverse Engineering a D-Link Backdoor”. No feed was found, so read it on the site itself.
Too few sampled comments (19) to say how often HN recommends it.?
Why HN links it
HN readers link Craig Heffner's blog for reverse engineering of router and embedded device firmware, covering backdoors, WPS PIN generation and leaked signing keys. Many commenters cite its posts as evidence of router security problems.
Summarised by Claude from a sample of 19 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Most-linked posts?
- Reverse Engineering a D-Link Backdoor3 people · 3 mentions · first linked 2013-10-12
- From China, With Love (Backdoors in their products)3 people · 3 mentions · first linked 2013-10-18
- Reverse Engineering Serial Ports3 people · 3 mentions · first linked 2012-11-02
- Hacking the D-Link DIR-890L3 people · 3 mentions · first linked 2015-04-11
- /blog/2 people · 2 mentions · first linked 2012-12-16
- D-Link patch doesn’t address all bugs listed in their own security advisory2 people · 2 mentions · first linked 2015-04-14
- Cracking Linksys “Encryption”2 people · 2 mentions · first linked 2014-03-03
- Reversing D-Link’s WPS Pin Algorithm2 people · 2 mentions · first linked 2014-10-31
- Show HN: Embedded Device Hacking Tools from the /dev/ttyS0 Site2 people · 2 mentions · first linked 2014-02-02
- Breaking SSL on Embedded Devices2 people · 2 mentions · first linked 2010-12-19
What Hacker News says?
- X4 · 2014-01-01
I hacked my Fritz!Box (yeah, a bad name for a german router) and I'm entirely sure that it has a backdoor integrated too. That's why I wiped and flashed it with an alternative image. That and the Telecom's Speedport router are the most popular routers by far in Germany. And both have backdoors, I know that other router manufacturers also integrate backdoors from a source who works at such a company. A friend can als…
Comment linking /2013/10/reverse-engineering-a-d-link-backdoor/
on “Backdoor found in Linksys, Netgear Routers” Submitted D-Link patch doesn’t address all bugs listed in their own security advisory as a story · 204 points
HN discussionCraig Heffner: https://github.com/devttys0 http://www.devttys0.com Fabrice Bellard: http://www.bellard.org
Comment linking /
on “Ask HN: Which developers do you closely follow?”Submitted Reverse Engineering a D-Link Backdoor as a story · 196 points
HN discussionSorry, no links, typing quickly: * F-Secure's blog and some other AV companies' blogs * Ramond Chen's The Old New Thing * Anything written by Mark Russinovich * Slightly off topic, but http://www.devttys0.com/ manages some crazy reverse engineering feats, which I feel are similar to this story.
Comment linking /
on “The little ssh that (sometimes) couldn't”Submitted From China, With Love as a story · 191 points
HN discussion> What then struck me was the way he casually decided to hack a VPN He's intentionally vague, but given he mentions two routers and two vpn systems, it's highly probable that he's referring to one of the two routers (which is embedded, and has firmware). Furthermore, he refers to a website[1] which predominately deals with routers. > is it really so straightforward? Routers, yes[2], VPN daemons, not as much. [1]: ht…
Comment linking /training/
on “Phineas Fisher's account of how he took down HackingTeam”Submitted WRT120N fprintf Stack Overflow as a story · 189 points
HN discussionI'll write one when I find something worthy of it. I've got stupidly high standards though. I've bought everything from wireless hard drives to $250 Wifi routers to $20 ethernet/3G bridges and the quality of the firmware is pretty garbage on all of them. I see brand new devices on kernel 2.4 and 2.6 with no upgrade plans in sight, and hacked up kernel trees that have no chance of building except on the developers' R…
Comment linking /blog/
on “More awful IoT stuff”Submitted Reversing the WRT120N’s Firmware Obfuscation as a story · 178 points
HN discussionhttp://www.devttys0.com/blog/ http://www.dumpanalysis.org/blog/ https://blogs.oracle.com/ksplice/ http://j00ru.vexillium.org/?lang=en http://blogs.msdn.com/b/ntdebugging/
Comment linking /blog/
on “Ask HN: What unknown technical blogs or sites do you read?”Submitted Cracking WPA in 10 hours or less as a story · 160 points
HN discussionIt is NOT by mistake. Dlink engineers are INCREDIBLY INCOMPETENT. Let me remind you this excellent piece: http://www.devttys0.com/2015/04/what-the-ridiculous-fuck-d-l...
Comment linking /2015/04/what-the-ridiculous-fuck-d-link/
on “D-Link publishes code-signing private keys by mistake”Submitted Cracking Linksys “Encryption” as a story · 132 points
HN discussionIf bored, you could try probing those various little gold test pads on the off chance they have a debug port[1] somewhere. Then again, Apple paranoia makes that overwhelmingly unlikely. [1] http://www.devttys0.com/2012/11/reverse-engineering-serial-p... (although JTAG is probably much more likely if anything)
Comment linking /2012/11/reverse-engineering-serial-ports/
on “The Lightning Digital AV Adapter Surprise”Submitted Reverse Engineering Firmware : Linksys WAG120N as a story · 101 points
HN discussionOff-topic: does anyone know what software was used to make graphics like http://www.devttys0.com/wp-content/uploads/2013/10/recvfrom.... ?
Comment linking /wp-content/uploads/2013/10/recvfrom.png
on “From China, With Love”Submitted Reversing D-Link’s WPS Pin Algorithm as a story · 96 points
HN discussionAlso there is a list of tools located at http://www.devttys0.com/tools/
Comment linking /tools/
on “Reversing the WRT120N’s Firmware Obfuscation”Submitted DD-WRT, I Know Where You Live as a story · 94 points
HN discussionNot quite what you're talking about, but there was recently a couple of posts by the 'binwalk' author about differentiating encrypted vs compressed data (presumed header-less): http://www.devttys0.com/2013/06/differentiate-encryption-fro... http://www.devttys0.com/2013/06/encryption-vs-compression-pa...
Comment linking /2013/06/encryption-vs-compression-part-2/
on “UK law says provide key to encrypted data or go to jail”Submitted Hacking the D-Link DIR-890L as a story · 76 points
HN discussionReminds me of the backdoor in D-Links routers: http://www.devttys0.com/2013/10/from-china-with-love/
Comment linking /2013/10/from-china-with-love/
on “TCP backdoor 32764 – how we could patch the Internet (or part of it)”Submitted Hacking the DSP-W215, Again, Again as a story · 66 points
HN discussionThis is often the case with WPS on home routers. Here's a blog post detailing the reversing of D-Links WPS PIN generation. http://www.devttys0.com/2014/10/reversing-d-links-wps-pin-al...
Comment linking /2014/10/reversing-d-links-wps-pin-algorithm/
on “Lizard Stresser Runs on Hacked Home Routers”Submitted Hacking the DSP-W215, Again as a story · 43 points
HN discussionDisclose to the vendor, wait 90-180 days, write a nice blog post. See http://www.devttys0.com/2015/04/hacking-the-d-link-dir-890l/ for one of my "favourites". I daren't push my $200 TP-Link too hard for fear of finding something like this.
Comment linking /2015/04/hacking-the-d-link-dir-890l/
on “Worm going through unpatched Ubiquiti routers”Submitted Hacking the DSP-W215, Again, Again, Again as a story · 11 points
HN discussionGreat article. So what's the fix? What should the right approach have been? Let's see a solution! And yes, I read the blog post associated with it and didn't see a solution: http://www.devttys0.com/2010/12/breaking-ssl-on-embedded-dev...
Comment linking /2010/12/breaking-ssl-on-embedded-devices/
on “Database of private SSL keys for embedded devices”Submitted Jailbreaking a set top box with the remote as a story · 11 points
HN discussion
