ICMP Covert Channel for IOS

I wrote a quick-and-dirty covert channel via ICMP for IOS routers.

The channel in question isn't super covert. It's all in plaintext and is quite noisy because it only delivers a single byte of message payload per ping. But it gets messages from routers to the listener via pings, and that was the objective. I expect it to be useful when diagnosing IPSec issues behind unknown overload NATs.

It lives here.

Invoke it on a router like this:

Router#tclsh flash:sender.tcl <target> testing 1 2 3

It will then send 14 pings (13 for the characters in 'testing 1 2 3' plus an <EOM> terminator) to the target machine.

The listener functions as a packet sniffer, so it requires root access. It prints out a line per incoming message, preceded by the sender's IP address:

# /tmp/listener.py 
192.168.5.5 testing 1 2 3


One million broadband offline in Germany; ‘external influence’ blamed

Almost one million Deutsche Telekom customers have been struggling to get online since Sunday afternoon.There's nothing wrong with the network, the company said, advising customers having trouble connecting to the internet to turn their router off and on again in the hope of solving the problem.Around 900,000 lines were initially hit by the connection problem, although the number affected is falling, Deutsche Telekom said Monday. But that number may be an underestimate: Since some of the affected routers also provide subscribers with telephone service, customers may have no way of letting the company know they are having difficulties.The cause of the outage is unknown, with those affected living in different areas and using different routers models, the comapany said. It dismissed suggestions that the problem was worse in congested areas.To read this article in full or to leave a comment, please click here

One million broadband offline in Germany; ‘external influence’ blamed

Almost one million Deutsche Telekom customers have been struggling to get online since Sunday afternoon.There's nothing wrong with the network, the company said, advising customers having trouble connecting to the internet to turn their router off and on again in the hope of solving the problem.Around 900,000 lines were initially hit by the connection problem, although the number affected is falling, Deutsche Telekom said Monday. But that number may be an underestimate: Since some of the affected routers also provide subscribers with telephone service, customers may have no way of letting the company know they are having difficulties.The cause of the outage is unknown, with those affected living in different areas and using different routers models, the comapany said. It dismissed suggestions that the problem was worse in congested areas.To read this article in full or to leave a comment, please click here

One million broadband offline in Germany; ‘external influence’ blamed

Almost one million Deutsche Telekom customers have been struggling to get online since Sunday afternoon.There's nothing wrong with the network, the company said, advising customers having trouble connecting to the internet to turn their router off and on again in the hope of solving the problem.Around 900,000 lines were initially hit by the connection problem, although the number affected is falling, Deutsche Telekom said Monday. But that number may be an underestimate: Since some of the affected routers also provide subscribers with telephone service, customers may have no way of letting the company know they are having difficulties.The cause of the outage is unknown, with those affected living in different areas and using different routers models, the comapany said. It dismissed suggestions that the problem was worse in congested areas.To read this article in full or to leave a comment, please click here

34% off Lexar Multi-Card 25-In-1 USB 3.0 Reader – Deal Alert

This extremely versatile device from Lexar reads 25 popular memory card formats, and leverages SuperSpeed USB 3.0 technology for high-speed file transfers, with a USB interface speed up to 500MB/s. It reads multiple slots at once to allow for simultaneous downloads/transfers, and pops closed to protect its card slots when not in use. It averages 4.5 out of 5 stars on Amazon, where its typical list price of $35 has been reduced 34% to $23.To read this article in full or to leave a comment, please click here

34% off Lexar Multi-Card 25-In-1 USB 3.0 Reader – Deal Alert

This extremely versatile device from Lexar reads 25 popular memory card formats, and leverages SuperSpeed USB 3.0 technology for high-speed file transfers, with a USB interface speed up to 500MB/s. It reads multiple slots at once to allow for simultaneous downloads/transfers, and pops closed to protect its card slots when not in use. It averages 4.5 out of 5 stars on Amazon, where its typical list price of $35 has been reduced 34% to $23.To read this article in full or to leave a comment, please click here

44% off Lexar Multi-Card 25-In-1 USB 3.0 Reader – Deal Alert

This extremely versatile device from Lexar reads 25 popular memory card formats, and leverages SuperSpeed USB 3.0 technology for high-speed file transfers, with a USB interface speed up to 500MB/s. It reads multiple slots at once to allow for simultaneous downloads/transfers, and pops closed to protect its card slots when not in use. It averages 4.5 out of 5 stars on Amazon, where its typical list price of $23 has been reduced 44% to $13 for a limited time.To read this article in full or to leave a comment, please click here

44% off Lexar Multi-Card 25-In-1 USB 3.0 Reader – Deal Alert

This extremely versatile device from Lexar reads 25 popular memory card formats, and leverages SuperSpeed USB 3.0 technology for high-speed file transfers, with a USB interface speed up to 500MB/s. It reads multiple slots at once to allow for simultaneous downloads/transfers, and pops closed to protect its card slots when not in use. It averages 4.5 out of 5 stars on Amazon, where its typical list price of $23 has been reduced 44% to $13 for a limited time.To read this article in full or to leave a comment, please click here

Hottest Cyber Monday 2016 Google & Microsoft tech deals

As anyone who watched any football over the weekend, and didn't blow by all the commercials knows, we all NEED a smart speaker like Amazon Echo or the newer Google Home. And lucky you: both products are among the tech items that retailers are offering at cut-rate prices this Black Friday and Cyber Monday 2016 holiday shopping season.To read this article in full or to leave a comment, please click here

44% off Lexar Multi-Card 25-In-1 USB 3.0 Reader – Deal Alert

This extremely versatile device from Lexar reads 25 popular memory card formats, and leverages SuperSpeed USB 3.0 technology for high-speed file transfers, with a USB interface speed up to 500MB/s. It reads multiple slots at once to allow for simultaneous downloads/transfers, and pops closed to protect its card slots when not in use. It averages 4.5 out of 5 stars on Amazon, where its typical list price of $23 has been reduced 44% to $13 for a limited time.To read this article in full or to leave a comment, please click here

40% off Snap Circuits Extreme Electronics Discovery Kit, For Kids – Deal Alert

The Elenco Electronics Snap Circuits Extreme SC-750 contains over 80 circuit components that snap together in various configurations to create over 750 do-it-yourself projects for kids (ages 8+ is suggested). No tools are required to create working electronic circuits and devices. A computer interface option lets children view waveforms and frequencies as well. The product averages 4.8 out of 5 stars on Amazon from 750 people (read recent reviews). Its typical list price of $140 has been reduced to just $84. See the discounted SC-750 electronics kit on Amazon.To read this article in full or to leave a comment, please click here

49% off Snap Circuits Extreme Electronics Discovery Kit, For Kids – Deal Alert

The Elenco Electronics Snap Circuits Extreme SC-750 contains over 80 circuit components that snap together in various configurations to create over 750 do-it-yourself projects for kids (ages 8+ is suggested). No tools are required to create working electronic circuits and devices. A computer interface option lets children view waveforms and frequencies as well. The product averages 4.8 out of 5 stars on Amazon from 750 people (read recent reviews). Its typical list price of $140 has been reduced to just $71. See the discounted SC-750 electronics kit on Amazon.To read this article in full or to leave a comment, please click here

When it comes to security, Android is the new Windows

For decades, it’s been conventional wisdom that Windows PCs are more vulnerable to attacks and malware than computers running the Mac OS. There’s been some argument over whether that was primarily due to inherent, structural security weaknesses or simply because Windows’ dominant market share makes it a bigger, juicier, more lucrative target for hackers.Whatever. There’s plenty of truth to the thought that Windows was more vulnerable than Macs, especially with earlier versions of the Microsoft operating system.But even as Windows security seems to be improving, the rise of mobile computing means the Windows/Mac security rivalry is no longer top of mind for many people. The biggest issue now concerns mobile security on iOS and Android devices, and once again Apple’s (relatively) walled garden appears to create a safer world than the more open environment of its more popular rival.To read this article in full or to leave a comment, please click here

Light Blogging Week

This week I’m working on a paper for a PhD seminar, as well as some other things I need to catch up on… I’m just going to be posting worth reading and pointers to some presentations and such in other places. Will return next week with a more normal schedule.

LinkedInTwitterGoogle+Facebook

The post Light Blogging Week appeared first on 'net work.

29% off Seagate Expansion 8TB Desktop External Hard Drive USB 3.0

The Seagate expansion desktop drive provides extra storage for your ever-growing collection of files. Instantly add space for more files, consolidate all of your files to a single location, or free up space on your computer's internal drive to help improve performance. Setup is straightforward; simply plug in the included power supply and USB cable, and you are ready to go. It is automatically recognized by the Windows operating system, so there is no software to install and nothing to configure. Saving files is easy too-just drag-and-drop. Take advantage of the fast data transfer speeds with the USB 3.0 interface by connecting to a SuperSpeed USB 3.0 port.  This drive receives 4.5 out of 5 stars on Amazon, where its typical list price of $240 has been reduced 29% to $170. See it now on Amazon.To read this article in full or to leave a comment, please click here

Black Friday & Cyber Monday 2016 by the numbers

Quickly on the heels of Black Friday and Cyber Monday deals come the number crunchers sharing just how the holiday shopping season is actually shaping up.The Consumer Technology Association says that this is the year that the number of mobile (smartphone/tablet) shoppers has finally approached the number of online shoppers using desktop or laptop computers. MORE: Hottest Cyber Monday 2016 deals on Apple productsTo read this article in full or to leave a comment, please click here

Microsoft details post-LinkedIn plans to EU

Antitrust regulators at the European Union like to make American firms jump through an awful lot of hoops before approving a big merger, as they did to Oracle when it spent nine months trying to acquire Sun Microsystems back in 2009. Now they are doing it to Microsoft over its proposed $26.2 billion acquisition of LinkedIn. Earlier this month, regulators expressed concerns to Microsoft that it would stifle access to LinkedIn's APIs and other mobile concerns. Last week, the European Commission said Microsoft had responded to those concerns by proposing "concessions," which Reuters has obtained. According to the news outlet, Microsoft has made three major promises to the European Commission:To read this article in full or to leave a comment, please click here

7 simple truths you should know about the hybrid cloud

I'm about to tell you something that may shatter what you think about the cloud: The hybrid cloud does not exist.The enterprise cloud adoption manual puts hybrid cloud at the top of the list. But you cannot buy one off the shelf. It’s not one-size-fits-all.[ Want to know more about cloud? Learn more with Pluralsight, a technology learning platform. Save $100 now. ] Rather, the hybrid cloud is made up of models, processes, and multiple providers. The moment you start paying for a public cloud service, no matter how small or simple the service might be, you are in a hybrid cloud model. Ignore the textbook definitions: The “hybrid cloud” simply means you’re delivering IT services that use more than one hosting model.To read this article in full or to leave a comment, please click here

1 … 2,353 2,354 2,355 2,356 2,357 … 3,696