Notices by Richard "mtfnpy" Harman (xabean@infosec.exchange)

@b0rk @molly0xfff what are you two currently reading? I'm reading the Silo book series (the apple tv series)

@tilde @kaoudis great, now I want glow-in-the-dark white out contact lenses.

@feld Square D is supported, because I've read the docs and that's listed in there, and that's what I've got at the new home build.

@feld no, the panel itself is smart. https://Span.io

@feld span panel and it's own android app. But there is a JSON API you can hit, and the home assistant community has made an integration for it already.

Nice, the electrician wired up the span panels yesterday exactly how I wanted them, and now I can remotely(!) monitor it, since I also got Internet working at the house. The future is cool.

@ryanc the funny thing is I actually met someone in meatspace after they laughed their ass off at me from destroying a $800 TiVo with a radioshack soldering iron, trying to desolder the prom. I lifted *so* many pads. It was horrific.

@ryanc `KkEIo9GclBSevVHIk9GIzVnc2lmdlBiMwITNsAiZylWZuRmL`

Anybody here with a #linux #firewall #router that has two upstream internet links with #failover between primary/backup?

I'm trying to RTFM just *how* that would be done without a stupid shell script in a cron job "Can I ping interface1's gateway? No, remove it from the routing table" because routes _tend to be sticky_ and it doesn't make sense to _stay_ on a backup network connection if the primary (faster) connection has been restored.

Is there a cloud "throw money at the problem" service that cracks md5crypt passwords with GPUs?

@tychotithonus if you want to poke at it, here you go -- this is for a Yealink SIP phone. Strings in the firmware nearby suggest the password is YealinkPhone1106 but it doesn't seem to work on my hardware; which might be due to the fact that there's a config partition that overlay mounts a shadow file overtop of /etc/shadow from the ROM:

root:$1$.jKlhz0B$/Nmgj0klrsZk0nYc1BLUR/:11876:0:99999:7:::

@tychotithonus dunno what is in the /yealink/config filesystem yet. Haven't found a way into the device yet. I *did* manage to figure out how to enable telnet, through config it fetches via provisioning.

@tychotithonus cool, thank you. I appreciate it, this is an area I'm not well versed in :)

@morb @tychotithonus mmm whelp I bumped up the logging level through config, and I see when I try to telnet in with root/toor/admin/yealink any username all results in:

login[480]: invalid password for 'UNKNOWN' on 'pts/0'

@morb Oh neat, does this URL work on your phone? /servlet?p=hidden

@morb @tychotithonus my head was in the same place - the "diagnosis" page that apparently had straight up shell injection isn't in the firmware I'm running on this phone, and now I'm digging into some of the MACADDRESS.cfg provisioning files and related XML translation on the phone checking what gets (ab)used by grep into shell variables, etc.

@morb

always fun when running strings on a piece of firmware and you find:

user:s7C9Cx.rLsWFA
var:jhl3iZAe./qXM
admin:uoCbM.VEiKQto

@vathpela sorry, I'm mistaken it's even better https://dotat.at/email.html

@vathpela this reminds me of the internet lore of `at@dot.at`; an internic contact e-mail address for a domain name. I'd love to hear someone give this over a phone.

It's always hilarious to me when a person at $COMPANY thinks my e-mail address is obviously wrong, or that I work for them.

Most recent was my bank, previous was Garmin. "Wait, your email is garmin@[...]? Do you work for us?"