wirefloss's comments

wirefloss | 10 years ago | on: 37M Americans don’t use the Web. Here’s why you should care

Having myself been invited to join AARP (the most powerful lobby in US, google it) for a few years now I can attest that unfortunately some old people just can't learn internet, even ones with strong engineering background and otherwise highly functional today. What happens to today's users in their eighties only time will tell.

wirefloss | 11 years ago | on: SS7: Locate. Track. Manipulate [video]

I finally found the way to watch the presentation (BTW it's good), and the author mentions femtocell hacking as "if you hack femtocells you _may_ have a chance to have access to SS7", or something like that, i.e. very uncertain. He emphasizes a different method -- getting a "global title". That's what I meant in my original comment -- you have to join the telco club, and that is not trivial.

wirefloss | 11 years ago | on: SS7: Locate. Track. Manipulate [video]

The Verizon vuln referenced above seems has nothing to do with SS7. Femtocell is rooted, and only cell phones in a close proximity are vulnerable. I thought the presentation in Hannover deals with a much broader issue. And yes, femtocell may be potentially a gateway to the remote hacking of MSC, HLR, etc. Unfortunately I have not seen the presentation, so I can't be sure what it's about.

wirefloss | 11 years ago | on: SS7: Locate. Track. Manipulate [video]

All TDM and Sigtran signaling links of world-wide SS7 network are configured manually peer-to-peer. The signaling traffic including SMS texts travels mostly unencrypted. Hence it's next to impossible to get a real SS7 Pcap log (requires an NDA), let alone access to the SS7 network, unless you work with a network operator.

wirefloss | 11 years ago | on: The Man Who Made Tetris

The guy graduated from the same high-school a few years ahead of me (Moscow School 91). Me and my classmates had our ears full on how great he was from our homeroom teacher (yes, we had them in high-school). We were the bunch of pre-selected math wiz kids, but whatever we did, we often heard from the our homeroom lady "You are not Lesha Pazhitnov", or "Lesha did this...". We didn't quite know who he was, but hated him nonetheless :). This was way before he made Tetris.

wirefloss | 11 years ago | on: WireEdit – A Full Stack WYSIWYG Editor for Network Packets

You can install from any folder, not only your home folder. Most package installations under Linux do require sudo privileges, so WireEdit is in no way unique. You password is SAFE. Really. The README is trying to be pretty upfront about what it is, and how it works. See also my replies to other questions here.

wirefloss | 11 years ago | on: WireEdit – A Full Stack WYSIWYG Editor for Network Packets

One would think so. I'm certainly curious how much people use the tool. Wouldn't you? However in anticipation of security concerns the software doesn't gather any info, and makes no external connections. Auto-updates were implemented, but later disabled for the same reason.
page 1