ÃÂ¯ÃÂ½ÃÂ²ÃÂ°Ã‘Â€Ã‘ÂŒ - Xakep Online

More documents

Recommendations

Info

ISSUE ÂÇËÎÌ 1.5 ÊÃ. ÌÎÇÃÎÂ, ×ÒÎÁÛ ÁÛÑÒÐÎ ÄÓÌÀÒÜ ÌÎÙÍÀß ÂÛÑÎÊÎ×ÀÑÒÎÒÍÀß ÀÍÒÅÍÍÀ, ×ÒÎÁÛ ÄÀËÅÊÎ ÁÈÒÜ ÓÄÎÁÍÛÉ ÐÞÊÇÀÊ, ×ÒÎÁÛ ÒÀÑÊÀÒÜ ÍÎÓÒ Íà íàøåì äèñêå òû íàéäåøü ïîëíûå âåðñèè ïðîãðàìì, îïèñàííûõ â ýòîé ñòàòüå, à òàêæå ïîëíóþ ïîäáîðêó äîêóìåíòàöèè î áàãàõ bluetooth. ÎÏÒÈ×ÅÑÊÈÉ ÏÐÈÖÅË, ×ÒÎÁÛ ËÓ×ØÅ ÂÈÄÅÒÜ ÆÅÐÒÂÓ 068 XÀÊÅÐ 01 /85/ 06
TEXT ÀËÅÊÑÀÍÄÐ ËÞÁÈÌÎÂ AKA SASHIKS / REAL_SSHX@MAIL.RU / SUPERSNIPER ÐÀÇÁÈÐÀÅÌÑß Â ÊÐÈÒÈ×ÅÑÊÎÉ ÓßÇÂÈÌÎÑÒÈ ÏÐÎÒÎÊÎËÀ BT ß ÍÅ ÑÒÀÍÓ ÂÅËÈ×ÀÉØÈÌ ÌÛÑËÈÒÅËÅÌ ÑÎÂÐÅÌÅÍÍÎÑÒÈ, ÅÑËÈ ÑÊÀÆÓ “ ×ÒÎ BT ÑÅÉ×ÀÑ ÏÐÈÎÁÐÅË ÑÓÌÀÑØÅÄØÓÞ ÏÎÏÓËßÐÍÎÑÒÜ: ÁËÞÒÓÑ-ÌÎÄÓ- ËßÌÈ ÎÁÎÐÓÄÎÂÀÍÎ ÁÓÊÂÀËÜÍÎ ÂÑÅ: ÎÒ ÒÅËÅÔÎÍÎÂ È ÄÎ ÏÐÈÍÒÅÐÎÂ Ñ ÍÎÓÒÁÓÊÀÌÈ; ÏÎ ÓËÈÖÀÌ ÃÎÍßÞÒ ÒÎËÏÛ ÐÀÄÎÑÒÍÛÕ ÁËÞÄÆÅÊÅÐÎÂ; ÊÓ- ×À ËÞÄÅÉ Â ÌÃÍÎÂÅÍÈÅ ÎÊÀ ÎÁÌÅÍÈÂÀÞÒÑß ÊÎÍÒÀÊÒÀÌÈ È ÇÀÏÈÑßÌÈ ÑÎ ÑÂÎÈÕ ÒÅËÅÔÎÍÎÂ. ÊÀÇÀËÎÑÜ ÁÛ, ÂÑÅ ÄÎÂÎËÜÍÛ È ÍÈÊÒÎ ÍÅ ÆÀËÓÅÒ- Ñß. ÎÄÍÀÊÎ Ñ ÊÀÆÄÛÌ ÄÍÅÌ ÍÀÊÀÏËÈÂÀÅÒÑß ÂÑÅ ÁÎËÜØÅ È ÁÎËÜØÅ ÂÎÏ- ÐÎÑÎÂ ÎÒÍÎÑÈÒÅËÜÍÎ ÁÅÇÎÏÀÑÍÎÑÒÈ ÝÒÎÃÎ ÏÐÎÒÎÊÎËÀ. ÌÛ ÓÆÅ ÏÈÑÀ- ËÈ ÎÁ ÎÑÍÎÂÍÛÕ ÁÀÃÀÕ BLUETOOTH, À ÑÅÃÎÄÍß ÐÀÑÑÊÀÆÅÌ Î ÍÎÂÎÉ ÌÅ- ÒÎÄÈÊÅ ÂÇËÎÌÀ, ÊÎÒÎÐÓÞ ÐÀÇÐÀÁÎÒÀËÈ ÄÂÀ ÂÅÑÅËÛÕ ÈÇÐÀÈËÜÒßÍÈÍÀ ” ÏÎÂÅÑÒÜ Î ÃÎËÓÁÛÕ ÇÓÁÀÕ Âîçìîæíî, â ýòîì ìåñòå ñòàòüè ñòîèëî âûðàçèòü ñâîå íåãîäîâàíèå: äûðêà â òàêîì ïîïóëÿðíîì ïðîòîêîëå! Îáîëòóñû è íåãîäÿè ýòè ñêàíäèíàâû, ðàçðàáîò÷èêè bluetooth! Íî, ÿ äóìàþ, áóäåò ëó÷øå îòïðàâèòü âñþ êðèòèêó è íåäîâîëüíûå âîçãëàñû îòíîñèòåëüíî BT-áàãè àêêóðàòíî â òîïêó è, ñîáñòâåííî, ïðèñòóïèòü ê äåëó. À äåëî â òîì, ÷òî â ìàå ýòîãî ãîäà Àâèøà Âóë è ßíèâ Øàêåä (Avishai Wool, Yaniv Shaked) — ñîòðóäíèêè Òåëü-Àâèâñêîãî óíèâåðñèòåòà îïóáëèêîâàëè â Èíòåðíåòå ïîäðîáíîå îïèñàíèå àòàêè íà áëþòóñ-óñòðîéñòâà. Ìàòåðèàë íàäåëàë äîâîëüíî ìíîãî øóìà (òû, íàâåðíîå, ñëûøàë î íåì, äà?), è ýòî íå çðÿ. Ñóòü íàïàäåíèÿ çàêëþ÷àåòñÿ â òîì, ÷òî õàêåð ìîæåò ïîõèòèòü PIN-êîä âî âðåìÿ ïðîöåññà ïàðèíãà (pairing) äâóõ äåâàéñîâ. Ýòà ïðîöåäóðà âçëîìà äîâîëüíî ñëîæíàÿ è âêëþ÷àåò â ñåáÿ íåñêîëüêî ýòàïîâ, ñðåäè êîòîðûõ ñàìûì âàæíûìè ÿâëÿåòñÿ ñáîð ïàêåòîâ äàííûõ è èõ àíàëèç ñ ïîñëåäóþùåé ðàñøèôðîâêîé. Ñêàæó òåáå ñðàçó, ÷òî ìàòåðèàë ñâîåîáðàçíûé. Äëÿ òîãî ÷òîáû åãî ïðàâèëüíî ïîíÿòü, íóæíî íåìíîãî ïîðàçìûñëèòü è ïîäêëþ÷èòü ôàíòàçèþ. Ñàì ïðîöåññ àòàêè òåñíî ñâÿçàí ñ ìåõàíèçìîì àóòåíòèôèêàöèè è ñîçäàíèåì êëþ÷à-øèôðà ìåæäó äâóìÿ óñòðîéñòâàìè, ïîýòîìó ïåðåä òåì êàê ìû ïåðåéäåì íåïîñðåäñòâåííî êî âçëîìó PIN'à, äàâàé ïîãëÿäèì, êàêóþ ïîñëåäîâàòåëüíîñòü äåéñòâèé ñîâåðøàþò óñòðîéñòâà, æåëàþùèå ñîåäèíèòüñÿ. ÍÀ×ÀËÎ ÍÀ×ÀË — PAIRING Ïàðèíã — ýòî ïðîöåññ, â êîòîðîì äâà (èëè áîëåå) äåâàéñà ñâÿçûâàþòñÿ äëÿ ñîçäàíèÿ îáùåé äëÿ âñåõ óñòðîéñòâ ñåêðåòíîé âåëè÷èíû K init , êîòîðàÿ ïîòîì èñïîëüçóåòñÿ â äàëüíåéøåì îáùåíèè ýòèõ bluetooth-óñòðîéñòâ. Ñðàçó îãîâîðþñü, ÷òî ïî õîäó òåêñòà ÿ áóäó èíîãäà íàçûâàòü ïàðèíã «ñîïðÿæåíèåì» — ýòî ñèíîíèìû, ÷òîáû òû çíàë. Â íåêîòîðûõ îôèöèàëüíûõ äîêàõ ïî BT ìîæíî äàæå âñòðåòèòü ñìåøíîé ïåðåâîä («ïîäãîíêà ïàðû»), ïîýòîìó, ÿ äóìàþ, ÷òî íèêòî íå óëè÷èò íàñ â áåçãðàìîòíîñòè. Ïðîöåññ óñòàíîâêè ñâÿçè íàçûâàåòñÿ èíèöèàëèçàöèåé, è â bluetooth åå ïðèíÿòî äåëèòü íà òðè øàãà: 1 Ñîçäàíèå êëþ÷à èíèöèàëèçàöèè (òîò ñàìûé K init ) 2 Ñîçäàíèå êëþ÷à ñâÿçè (â îôèöèàëüíîé äîêóìåíòàöèè íàçûâàåòñÿ link key è îáîçíà÷àåòñÿ, êàê K ab ) 3 Àóòåíòèôèêàöèÿ Ïåðåä òåì êàê óñòðîéñòâà íà÷íóò «ñïàðèâàòüñÿ» (ëþäè, î ÷åì ÿ òóò ïèøó? :)), íà îáåèõ ñòîðîíàõ íóæíî ââåñòè ñïåöèàëüíûé PIN-êîä. Îáû÷íî, åñëè äâà ÷åëîâåêà õîòÿò ñâÿçàòü, äîïóñòèì, ñâîè òåëåôîíû, îíè çàðàíåå äîãîâàðèâàþòñÿ î òîì, êàêîé áóäåò PIN. Â áóäóùåì ñîåäèíÿþùèåñÿ óñòðîéñòâà ìû áóäåì íàçûâàòü âåñüìà êðàñíîðå÷èâî — A è B; êðîìå òîãî, îäíî óñòðîéñòâî ïðè ïàðèíãå ñòàíîâèòñÿ ãëàâíûì (Master), à äðóãîå — âåäîìûì ÑÓÒÜ ÍÀÏÀÄÅÍÈß ÇÀÊËÞ×ÀÅÒÑß Â ÒÎÌ, ×ÒÎ ÕÀÊÅÐ ÌÎÆÅÒ ÏÎÕÈÒÈÒÜ PIN-ÊÎÄ ÂÎ ÂÐÅÌß ÏÐÎÖÅÑÑÀ ÏÀÐÈÍÃÀ (PAIRING) ÄÂÓÕ ÄÅÂÀÉÑÎÂ. XÀÊÅÐ 01 /85/ 06 069
Page 3 and 4:
INTRO Â ÍÎÂÛÉ ÃÎÄ Ñ HEX
Page 5 and 6:
ÐÅÄÀÊÖÈß >Ãëàâíûé ð
Page 8:
][NEWS SMS-ÊÀÌÈÊÀÄÇÅ Èí
Page 12 and 13:
][NEWS ][NEWS Ó ÃÀÈØÍÈÊÎÂ
Page 14 and 15:
HITECHNEWS ÍÀÑÒÎËÜÍÀß Ð
Page 16 and 17:
HARDNEWS HITECHNEWS ÒÐÀÍÑÔÎ
Page 18:
Äîáðîãî âðåìåíè ñó
Page 21 and 22: ÏÀÌßÒÜ Â ÊÀÐÌÀÍÅ òå
Page 23 and 24: 256MB Imation Flash Drive Mini Âð
Page 26 and 27: PC_ZONE TEXT A.M.D.F. / HTTP://AMDF
Page 28 and 29: PC_ZONE ///// ISSUE ÌÓËÜÒÈÏ
Page 30: PC_ZONE ///// ISSUE ÎÁËÀÑÒÈ
Page 33 and 34: PC1 PC2 SERVER SERVER PC2 PC1 SWITC
Page 35 and 36: ÏÐÎÙÀÉ ÌÎËÎÄÎÑÒÜ! Ê
Page 38 and 39: ISSUE PC_ZONE “ Ê ÊÐÈÏÒÎÃ
Page 40 and 41: PC_ZONE ///// ISSUE ÄÅÐÆÈ ÓÕ
Page 42 and 43: ÕÀÊÅÐ ÐÀÑÑÊÀÇÛÂÀÅÒ
Page 44 and 45: ÂÇËÎÌ ///// ///// ISSUE ÄÈÇ
Page 46 and 47: ÄÈÇÀÉÍ ///// ISSUE 01 ÑÊÀ
Page 48 and 49: ÄÈÇÀÉÍ ///// ISSUE 13 È ÑÍ
Page 50 and 51: ÂÇËÎÌ ///// ISSUE HACK-FAQ Á
Page 52 and 53: ÂÇËÎÌ “ ÍÀÉÒÈ ÓßÇÂ
Page 54 and 55: ÂÇËÎÌ ///// ISSUE øåëë-ê
Page 56 and 57: ÂÇËÎÌ ///// ISSUE Ïðàêòè
Page 58 and 59: ISSUE ÂÇËÎÌ TEXT ÄÎÊÓ×À
Page 60: ÂÇËÎÌ ///// ISSUE Î ÏÐÀÂ
Page 63 and 64: TEXT MAG / MAG@WAPP.RU / ÒÓÏÛÅ
Page 65 and 66: ÂÅÕÈ ÓÑÏÅÕÀ ÎÒÄÅËÀ
Page 67 and 68: RSA-KEYS > êîä, ðàñøèôðî
Page 69: Äëÿ íàõîæäåíèÿ p è q
Page 73 and 74: Ñòîèò ðàçëè÷àòü ïð
Page 76 and 77: ISSUE ÂÇËÎÌ TEXT LEXX918 / LEX
Page 78 and 79: ÂÇËÎÌ ///// ISSUE îòëîâë
Page 80 and 81: ÂÇËÎÌ TEXT ÑÀØÀ ËÞÁÈÌ
Page 82 and 83: ÂÇËÎÌ ///// ISSUE ÍÀ ÑÒÐ
Page 84 and 85: ÂÇËÎÌ ///// ISSUE ÑÖÅÍÀ T
Page 86 and 87: CÖÅÍÀ ///// ISSUE Áèçíåñ
Page 88 and 89: ÂÇËÎÌ ///// ISSUE ÑÖÅÍÀ T
Page 90: CÖÅÍÀ ///// ISSUE ÈÍÒÅÐÅ
Page 93 and 94: ÏÎÐÍÎÌÀÍÛ Ó×ÅÍÛÅ Ñ
Page 95 and 96: ÑÀÌÛÉ ÏÐÈÁÛËÜÍÛÉ Á
Page 97 and 98: TEXT OVERMIND / evil-2002@yandex.ru
Page 99 and 100: Êðóïíåéøèå ðóññêîÿ
Page 101 and 102: Ê 2000 ãîäó â Ðîññèè ñ
Page 103 and 104: ÂËÀÄÅËÜÖÀÌ ÂÛÄÅËÅÍ
Page 105 and 106: ñåàíñ zftp ùåãî web-ðîá
Page 108 and 109: ISSUE UNIXOID TEXT ANDREY MATVEEV /
Page 110 and 111: UNIXOID ///// ISSUE ïðàâèì ð
Page 112 and 113: ISSUE UNIXOID TEXT ÊÐÈÑ ÊÀÑ
Page 114 and 115: UNIXOID ///// ISSUE ïðîñìîò
Page 116 and 117: ÊÎÄÈÍÃ ASSEMBLER TEXT ÊÐÈ
Page 118 and 119: ÊÎÄÈÍÃ ///// ISSUE ASSEMBLER
Page 120:
ÊÎÄÈÍÃ ///// ISSUE ASSEMBLER
Page 123 and 124:
îò ñâîèõ ñîáðàòüåâ.
Page 126 and 127:
ÊÎÄÈÍÃ ÊÎÄÈÍÃ ///// ISS
Page 128 and 129:
ÊÎÄÈÍÃ ///// ISSUE Ñ/Ñ++ Ñ
Page 131 and 132:
TEXT MINDW0RK / mindw0rk@gameland.r
Page 133 and 134:
òåðïêóþ ãðÿçíóþ æè
Page 137 and 138:
Âðàã îòêðûë äâåðü,
Page 139 and 140:
Êàê îôîðìèòü çàêàç?
Page 141 and 142:
5 6 7 Áàðñèê www.niif.spbu.ru
Page 143 and 144:
Q: Äëÿ îòêëþ÷åíèÿ USB-
Page 146 and 147:
_units Disco Íàçâàíèå âè
Page 148 and 149:
WINDOWS DEVELOPMENT Development Hex
Page 150 and 151:
Äåôðàãìåíòàöèÿ æåñ
Page 152 and 153:
Õóæå âñåãî — ïðîâå
Page 154 and 155:
KWave 0.7.4 POSIX (*BSD, Linux, Sol
Page 156 and 157:
Restorator 2005 Resource Editor Win
Page 158:
PC_ZONE ÞÍÈÒÛ ///// ///// ISSU
Page 161 and 162:
ÒÀÁÀ ÖÈÊËÎÍ TEXT ÄÀÍß
Page 165:
x 01(ßÍÂÀÐÜ)06 85
show all

ÃÂ¯ÃÂ½ÃÂ²ÃÂ°Ã‘Â€Ã‘ÂŒ - Xakep Online

Create successful ePaper yourself

Delete template?

Save as template?

ÃÂ¯ÃÂ½ÃÂ²ÃÂ°Ã‘Â€Ã‘ÂŒ - Xakep Online