MotoMAGX weakness of kernel modules hashes

2008-06-09 Thread Stefan Schmidt
Hello. Good news everyone(TM) Dmitriy Taychenachev found some weakness in the MAGX security model. Even if we were able to telnet into these devices as root we were never able to do the system any harm (or better). The kernel-based security model restricted all the interesting parts of the syste

MotoMAGX weakness of kernel modules hashes

2008-06-10 Thread Dmitriy Taychenachev
Hello, >> Hopefully he will soon provide a hacked kernel module that, when loaded, >> will disable the kernel module protection. Bonus points if we can remove >> the mount point restrictions and other stuff too :) > I think Dimitry is working on some things. Let stay tuned which what >he com

Re: MotoMAGX weakness of kernel modules hashes

2008-06-09 Thread Вадим Абрамчук
2008/6/9 Stefan Schmidt <[EMAIL PROTECTED]>: > > Good news everyone(TM) > > Dmitriy Taychenachev found some weakness in the MAGX security model. > > Over the next days he will also make some sample exploit code > available.

Re: MotoMAGX weakness of kernel modules hashes

2008-06-10 Thread Stefan Schmidt
Hello. [Is there a reason why you reply to people in private and not to the list or just a misbehaving mail client?] On Wed, 2008-06-11 at 00:58, Jonathan Wilson wrote: > This is good news. Indeed. > Hopefully he will soon provide a hacked kernel module that, when loaded, > will disable the k

Re: MotoMAGX weakness of kernel modules hashes

2008-06-10 Thread Stefan Schmidt
Hello. On Wed, 2008-06-11 at 02:45, Dmitriy Taychenachev wrote: > > >> Hopefully he will soon provide a hacked kernel module that, when loaded, > >> will disable the kernel module protection. Bonus points if we can remove > >> the mount point restrictions and other stuff too :) > > > I think

Re: MotoMAGX weakness of kernel modules hashes

2008-06-10 Thread Jonathan Wilson
I have the possibility to test stuff on a V8. Not my device, but possible. Also Wyrm may can test on a Z6 from time to time. I'm also trying to get a cheap Z6 my own for further testing. I can test stuff on a Z6 as long as it doesn't involve anything that could render the phone unusable as a pho

Fwd: MotoMAGX weakness of kernel modules hashes

2008-06-11 Thread Вадим Абрамчук
2008/6/11 Jonathan Wilson <[EMAIL PROTECTED]>: I have the possibility to test stuff on a V8. Not my device, but >> possible. Also Wyrm may can test on a Z6 from time to time. >> >> I'm also trying to get a cheap Z6 my own for further testing. >> > I can test stuff on a Z6 as long as it doesn't in

Re: MotoMAGX weakness of kernel modules hashes

2008-06-11 Thread Daniel Ribeiro
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Dmitriy Taychenachev escreveu: I'm also trying to get a cheap Z6 my own for further testing. >>> I can test stuff on a Z6 as long as it doesn't involve anything that >>> could render the phone unusable as a phone or pose a risk of bricking the >>>

Re: MotoMAGX weakness of kernel modules hashes

2008-06-11 Thread Dmitriy Taychenachev
On Wednesday 11 June 2008 22:00:49 Daniel Ribeiro wrote: > Dmitriy Taychenachev escreveu: > I'm also trying to get a cheap Z6 my own for further testing. > >>> > >>> I can test stuff on a Z6 as long as it doesn't involve anything that > >>> could render the phone unusable as a phone or pose a

Re: MotoMAGX weakness of kernel modules hashes

2008-06-14 Thread Stefan Schmidt
Hello. On Wed, 2008-06-11 at 02:45, Dmitriy Taychenachev wrote: > > >> Hopefully he will soon provide a hacked kernel module that, when loaded, > >> will disable the kernel module protection. Bonus points if we can remove > >> the mount point restrictions and other stuff too :) > > > I think

Re: Fwd: MotoMAGX weakness of kernel modules hashes

2008-06-11 Thread Dmitriy Taychenachev
On Wednesday 11 June 2008 19:48:13 Вадим Абрамчук wrote: > 2008/6/11 Jonathan Wilson <[EMAIL PROTECTED]>: > > I have the possibility to test stuff on a V8. Not my device, but > > >> possible. Also Wyrm may can test on a Z6 from time to time. > >> > >> I'm also trying to get a cheap Z6 my own for f