gramels blog - english

Hack a plane!

nospam@example.com (gramels) — Sat, 05 Jan 2008 09:16:16 +0100

It seems like, that Boing made a typical design flaw:

Never connect two networks with differen security status.
Firewall them.
If security status is too different ensure physical separation.

The last point seems to apply also to plains flight control and passengers interent connectivity systems.

Not for Boing it looks like: http://www.wired.com/politics/security/news/2008/01/dreamliner_security.

fluffy trojan

nospam@example.com (gramels) — Thu, 03 Jan 2008 17:33:19 +0100

For those of you which have missed 24c3 and "Security nightmares 2008" (get the recording at http://outpost.h3q.com/fnord/24c3-torrents/ ) here is the right trojan for your bosses desk (the features just lack network connectivity):

• camera-based vision system (for light detection and navigation)
• two microphones, binaural hearing
• eight touch sensors (head, chin, shoulders, back, feet)
• four foot switches (surface detection)
• fourteen force-feedback sensors, one per joint
• orientation tilt sensor for body position
• infrared mouth sensor for object detection into mouth
• infrared transmit and receive for communication with other Pleos
• Mini-USB port for online downloads
• SD card slot for Pleo add-ons
• infrared detection for external objects
• 32-bit Atmel ARM 7 microprocessor (main processor for Pleo)
• 32-bit NXP ARM 7 sub processor (camera system, audio input dedicated processor)
• four 8-bit processors (low-level motor control)

(The toy is called Pleo, more at http://www.pleoworld.com/discover)

waiting for the [up/down] link

nospam@example.com (gramels) — Mon, 10 Dec 2007 16:17:18 +0100

After years without broadband up here in the black forest the newly established wireless broadband provider promised me for tomorrow to get access to their test setup.

I am ready!

After years without broadband up here in the black forest the newly established wireless broadband provider promised me for tomorrow to get access to their test setup.

I am ready!

tune the truth - you don't get what you see

nospam@example.com (gramels) — Thu, 27 Sep 2007 23:06:36 +0200

Some of you might remeber the picture of the girl in the knee deep mudd at CCCamp 2007

Here is the truth about this picture:

Heavy rain @ camp07

nospam@example.com (gramels) — Sat, 11 Aug 2007 17:53:37 +0200

camp07 at night

nospam@example.com (gramels) — Fri, 10 Aug 2007 19:48:32 +0200

Hackers on a planebus

nospam@example.com (gramels) — Fri, 10 Aug 2007 19:07:04 +0200

Well, it looks like that the widely announced "Hackers on a plane" ( also here ) turned into a "Hackers on a bus" trip. (see also http://ioerror.livejournal.com/448684.html)

Due to some (unconfirmed) scheduling issues (<rumor> somebody mixed up dates due to the fact that timezones exist </rumor>) the Hackers coming from Defcon had to take a bus from Duesseldorf airport to the camp site.

Instead of riding a chartered DO-328 they rode this nice chartered coach:

This coach took 10h from Düsseldorf to Berlin, while the Berlin airports are just 50 minutes away from here.

However, to compensate for the bus trip, there is still a chance at the camp to take off at the runway attached to the camp.

A round trip with the Hacker plane, a AN 2.

CCC camp07 dog rules

nospam@example.com (gramels) — Fri, 10 Aug 2007 18:51:30 +0200

some impressions about dog rules at CCC camp 2007

display asterisk callerID on a dreambox digital TV set top box

nospam@example.com (gramels) — Mon, 16 Jul 2007 11:14:47 +0200

In addition to my recent article how to display asterisk CallerID on a Slimserver, I would like to give some instructions about how to do the same with a Dreambox (digital DVB-[T/C/S] receiver running linux) so that a incomming call will be alerted on your TV screen.

Its quite simple, just put at a usefull location in your asterisks extension.conf the following line:

exten => 2210,4,System(/usr/bin/wget -q -b http://dreambox/cgi-bin/"message?${CALLERID(num)} ${CALLERID(name)}")

where

2210: is your extension

dreambox: is the IP (or DNS entry) of your dreambox.

getting famous @ tobitoon

nospam@example.com (gramels) — Sat, 09 Jun 2007 23:59:56 +0200

It looks like I am the most referred person within tobitoon. I don't envy Josha, who had been called all his visit Lothar.

http://tobitoon.blogspot.com/2007/06/joscha2.html

http://tobitoon.blogspot.com/2007/06/pink-underwear.html

Bäcker's Mutanten

nospam@example.com (gramels) — Thu, 17 May 2007 20:59:19 +0200

links ein Maisbrötli, rechts eine Zopfmaus vom Beck ums Eck

(ich durfte den Eintrag nicht "Bäcker's Mutantenstadel" nennen...)

Rimowa & [die Räder/ the wheels]

nospam@example.com (gramels) — Thu, 17 May 2007 20:27:00 +0200

A brand Rimowa Salsa Multiwheel 869.77 (110 liters) suitcase at the beginning of a longer trip.

Ein nagelneuer Rimowa Salsa Multiwheel 869.77 (110 Liter) Koffer vor einer langen Reise.

mit allen seinen Rädern

including all its wheels

After each US flight one was missing, therefore the suitcase arrived back home like this. Maybe the US luggage handle staff had this Rimowa wheel cracking challenge. To be fair, the suitcases weight was about 31.5 kg, but the wheels should have handled that anyway.

Nach jeder Teilstrecke fehlte dann ein Rad, und der Koffer kam so wieder zuhause an. Vielleicht gab es ja einen Wettbewerb unter den Gepäckmitarbeitern an den US Fluhäfen "hey, a Rimowa, lets see if the wheel cracks". Der Koffer wog zwar 31.5 kg, aber er hätte das dann doch schadlos überstehen müssen.

Rimowa claimed a manufacturing problem and sent me new wheels (I did not want to bring it back into the shop).
Let's see, if they survive next time.

Rimowa beruft sich auf ein Herstellungsfehler bezüglich der defekten Räder und schickte mir Ersatzräder (da es mir zu mühsam war mit dem Koffermonster in einen Laden zu gehen).
Nun bin ich mal gespannt, ob diese die nächste Reise überstehen.

Tobi did it again

nospam@example.com (gramels) — Fri, 27 Apr 2007 21:21:04 +0200

Yet another tobitoon with reference to me.

Please give tobitoon lots of comments .

Lothar in a tobitoon comic

nospam@example.com (gramels) — Wed, 18 Apr 2007 18:51:38 +0200

It took me 20 years to get into one of the genius comics of my old friend from school Tobi. My visit to Alex & Tobs (plus the kids & the dog) finally made it happen.

Here it is!

Freitag Gespenst

nospam@example.com (gramels) — Thu, 05 Apr 2007 00:30:35 +0200

fortschreitende Helvetisierung v0.2

variable asterisk callback

nospam@example.com (gramels) — Sat, 31 Mar 2007 15:35:00 +0200

intro

This howto is a extension to my recent "simple (fixed) asterisk callback configuration". This configuration is useful to trigger a callback from a location you rarely use, but provides a callerID. This is for example useful in hotel rooms for one night, phone cells, friends homes. The call process is the following:

you call from a phone with callerID 004144555111 the trigger number 004144555666
wait for the busy signal
hangup
wait until the phone rings
enter password
enter target number

The target number will then be called according to the outbound call routing in your pbx.

how does it work

The system recognizes rejects all calls on the trigger number.
It uses the callerID and generates a temporary call file which will will be copied from a directory (/var/spool/asterisk/ in the example below) into the outgoing directory
asterisk initiates the outbound call according to the rules in the call file
once you pick up the callback call, you will get a dialtone and be able to dial as from a local extension

example
Continue reading "variable asterisk callback"

display asterisk callerID on a squeezebox/ slimp3 using a slimserver

nospam@example.com (gramels) — Sat, 10 Mar 2007 20:39:00 +0100

The goal of this small nerd activity is that my slimp3 networked mp3 players display displays the callerID of inbound calls so that I see who is calling even without looking at a phone. I have a networked slimp3 player in my living room as well as in my office.

Update: if you own a dreambox, see this article as well

prerequisites:

asterisk server
slimserver
any kind of slimp3/squeezebox/transporter device from slimdevices
slimdisplay.pl script (see below, modified based on gwendesigns SlimServer announcement script)

purpose:

Display incoming caller information on your squeezebox.

instruction:

Continue reading "display asterisk callerID on a squeezebox/ slimp3 using a slimserver"

simple (fixed) asterisk callback configuration

nospam@example.com (gramels) — Mon, 12 Feb 2007 17:13:00 +0100

intro

This a simple howto get a callback feature into asterisk.

Its based on the assumption, that you have a account at a provider, which lets you dial into your box remotely and the location you call from provides a callerID. So this setup is mostly useful, if you have a flatrate at home and would like to use it, lets say, from your parents place.

The call process looks is the following:

you call from the phone which sends the caller ID 004144555111 the trigger number 004144555666
wait until you get a buisy signal
hangup
wait until it rings
pick it up
enter password (optional, see security remark)
enter target number

The target number will then be called according to the outbound call routing in your pbx.

Of course, you can setup more than one of those in case you are in a hotel and your room fone provides direct dial through callerID. Just install it temporarily for your hotel stay on your home asterisk.

Security remark: The authentication of the callback trigger is based on the callerID of the calling line. If your SIP provider allows SIP URI calls the callerID might be spoofed. I thats the case, you should but additional security in place (like a password, see below).

A more complicated setup which allows to trigger a callback from any number can be found here.

how does it work

The system recognizes the number you dialed and the number you dialed from (CallerID)
the call gets rejected
a fixed call file will be copied from a directory (/var/spool/asterisk/ in the example below) into the outgoing directory
asterisk initiates the outbound call according to the rules in the call file
once you pick up the callback call, you will get a dialtone and be able to dial as from a local extension

example

Continue reading "simple (fixed) asterisk callback configuration"

MacBook Pro (Display) frustration [not allone]

nospam@example.com (gramels) — Sun, 11 Feb 2007 11:54:20 +0100

Adam brought his frustration about Apple Displays to the next step by providing a video:

http://adam.lumanation.com/archives/134

and made me aware of it in his comment in my blog

I wrote about that twice here: