November 2006


Two students have managed to hack the new fon.com router “La Fonera”. The openwrt-based router was intended to be more secure and harder to hack than former systems. Nontheless the students managed to inject shell code into the system and prevent further firmware updates from fon.com without tampering with the hardware, but from a simple ssh connection. More information on the hack can be found on this website of one of the students: http://stefans.datenbruch.de/lafonera/
Fon.com is working on building a world-wide network of free wifi hotspots. To encourage users to signup they are offering cheap pre-configured routers to new users which will provide a secure ssid for personal user and a public unencrypted ssid.

Just a few minutes ago someone reached this website searching for “http_user_agent sidekick” - though there wasn’t an answer to that question on the site google referred him to. Well anyway, the answer is simple: The Danger Sidekick/Hiptop uses a user-agent of “Mozilla/5.0 (Danger hiptop 2.0; U; AvantGo 3.2)” and request are from the network 216.220.208.0/20 (216.220.208.0 to 216.220.223.255).

The sticky bit is an attribute for files and directories on linux. That is the short answer and about as much as I have known about it for the last years. But what exactly is it for?

As always, wikipedia gave the answer:

  • The sticky bit on executable files tells the system to keep the file in memory for later executions by the same or other users. Because of persistent storage and caching this usage is obsolete today.
  • On directories with the sticky bit set only the owner of a file may modify or delete it regardless of the other access rights. This way a 777ed directory can be used by several users at once: each user will be ably to create files and modify or delete files he has created. Files by other users can’t be accessed though the rights are set to rwxrwxrwx. The /tmp directly is normally set as sticky, “ls -l” indicates a sticky directory with the letter “t”. 

« Previous Page