Conversation

Notices

1. ✧✦✶✷Catherine✷✶✦✧ (whitequark@mastodon.social)'s status on Wednesday, 06-Dec-2023 08:58:54 JST ✧✦✶✷Catherine✷✶✦✧

   *placing my bicycle, upside down, closer to my working desk, booting my headmate's windows desktop, plugging a small $120 black box into the bike, and running extremely sketchy software to update and configure its firmware*

   where did my life go so wrong

   • ✧✦✶✷Catherine✷✶✦✧ (whitequark@mastodon.social)'s status on Wednesday, 06-Dec-2023 08:58:49 JST ✧✦✶✷Catherine✷✶✦✧

     in reply to

     I mean not that YesEncryptMode would help a whole lot

   • Foone🏳️‍⚧️ (foone@digipres.club)'s status on Wednesday, 06-Dec-2023 08:58:49 JST Foone🏳️‍⚧️

     in reply to

     @whitequark there is so much code out there that runs on user machines that does AES encryption and still somehow thinks they can hide things from that user.

   • ✧✦✶✷Catherine✷✶✦✧ (whitequark@mastodon.social)'s status on Wednesday, 06-Dec-2023 08:58:50 JST ✧✦✶✷Catherine✷✶✦✧

     in reply to

     well at least the god damn thing works with my bike

     (that's the drivetrain and the battery; I'll need to swap two of the powerline I-can't-believe-it's-not-CAN connectors to get the display configuration)

   • ✧✦✶✷Catherine✷✶✦✧ (whitequark@mastodon.social)'s status on Wednesday, 06-Dec-2023 08:58:50 JST ✧✦✶✷Catherine✷✶✦✧

     in reply to

     NO ONE:

     Shimano: EncryptedLogFileWriter.NoEncryptMode

   • ✧✦✶✷Catherine✷✶✦✧ (whitequark@mastodon.social)'s status on Wednesday, 06-Dec-2023 08:58:51 JST ✧✦✶✷Catherine✷✶✦✧

     in reply to

     I guess those aren't batteries but supercaps, four cells of them at 2.5 V, and the balancing input is needed because it's really bad to reverse polarity on supercaps. that sort of makes sense I suppose. what are they doing that needs _that much_ current

   • ✧✦✶✷Catherine✷✶✦✧ (whitequark@mastodon.social)'s status on Wednesday, 06-Dec-2023 08:58:51 JST ✧✦✶✷Catherine✷✶✦✧

     in reply to

     the WLCSP ASIC is labelled EF71XW1, which doesn't have any hits. I know this is some disgusting Renesas device based on firmware analysis. I fucking hate Renesas. I cannot put into words how much I hate Renesas. So of course it is Renesas

     it seems to have exposed JTAG, so after I'm done doing what I want with the bike I might plug it into Glasgow and see if I can get at least an IDCODE out of it. of course actual debug is almost certainly impossible

   • ✧✦✶✷Catherine✷✶✦✧ (whitequark@mastodon.social)'s status on Wednesday, 06-Dec-2023 08:58:51 JST ✧✦✶✷Catherine✷✶✦✧

     in reply to

     the wire communication on the bike itself is _I think_ unencrypted and I know how the USB requests to the controller look like (very simple) so I should be able to mostly ignore the existence of the reviled Renesas thing and just black box RE how it converts USB into electric wire, if I decided to do it

   • ✧✦✶✷Catherine✷✶✦✧ (whitequark@mastodon.social)'s status on Wednesday, 06-Dec-2023 08:58:52 JST ✧✦✶✷Catherine✷✶✦✧

     in reply to

     (fuck you Shimano)

   • ✧✦✶✷Catherine✷✶✦✧ (whitequark@mastodon.social)'s status on Wednesday, 06-Dec-2023 08:58:52 JST ✧✦✶✷Catherine✷✶✦✧

     in reply to

     fuck this thing so hard

     the label covers up the unique serial number and barcode that I don't wanna publicly flash, because *of course* it is serialized and laser marked

     if it also turns out to have intrusion detection and battery backed RAM I will be so mad

   • ✧✦✶✷Catherine✷✶✦✧ (whitequark@mastodon.social)'s status on Wednesday, 06-Dec-2023 08:58:52 JST ✧✦✶✷Catherine✷✶✦✧

     in reply to

     ... well I will be motherfucking damned

     what on earth am I even looking at

     why is _this_ inside the box. what the ever living fuck is this

   • ✧✦✶✷Catherine✷✶✦✧ (whitequark@mastodon.social)'s status on Wednesday, 06-Dec-2023 08:58:52 JST ✧✦✶✷Catherine✷✶✦✧

     in reply to

     I... this thing... has... not one but two rechargeable batteries? Two-cell fucking rechargeable batteries? With a balancing input? What drugs are they on?

     back side pic:

   • ✧✦✶✷Catherine✷✶✦✧ (whitequark@mastodon.social)'s status on Wednesday, 06-Dec-2023 08:58:53 JST ✧✦✶✷Catherine✷✶✦✧

     in reply to

     aside from the ~$250 (new) price of the communication adapter, which i am SO taking apart, the fucking bicycle firmware configuration software uses so many anti-RE tricks you would think you are looking at a Korean MMORPG

     it installs a kernel driver hooking the internal kernel structures to hide the process that they somehow got Microsoft to sign

     then it use some homegrown obfuscation to hide the .NET method code by hooking calls in mscoree.dll

   • ✧✦✶✷Catherine✷✶✦✧ (whitequark@mastodon.social)'s status on Wednesday, 06-Dec-2023 08:58:53 JST ✧✦✶✷Catherine✷✶✦✧

     in reply to

     what i want to do is to switch the unit display from miles to kilometers

   • schrotthaufen (schrotthaufen@mastodon.social)'s status on Wednesday, 06-Dec-2023 09:29:10 JST schrotthaufen

     in reply to

     • Foone🏳️‍⚧️

     @foone @whitequark I’ve been payed by a company to reverse engineer their own smart card simulator once, to see how hard it would be to dump the encrypted firmware images they gave their customers with the simulator. It was regular DES. In 2015. Their legal dept. asked why that’s a problem, because customers have to sign NDAs anyway.

   • Foone🏳️‍⚧️ (foone@digipres.club)'s status on Wednesday, 06-Dec-2023 09:29:10 JST Foone🏳️‍⚧️

     in reply to

     • schrotthaufen

     @schrotthaufen @whitequark plain DES? not even 3DES?