Telefoncek.si • How I discovered a hidden microphone on a Chinese NanoKVM
telefoncek.si
NanoKVM is a hardware KVM switch developed by the Chinese company Sipeed. Released last year, it enables remote control of a computer or server using a virtu...
  • NuXCOM_90Percent@lemmy.zipEnglish
    108·
    11 days ago

    Apalrd has done some great “popular computer science” videos on the various remote KVM devices that is well worth looking up. One of them specifically goes into the ridiculously sketchy methods that are used to fetch and execute unsigned code in random buckets to handle firmware updates.

    But as for the mic? Honestly, if you open up a LOT of consumer devices you are going to find random microphones. Not because they are all secretly spying on you. But because they use “off the shelf” chips and boards that already have those embedded. Especially since microphones and speakers are kind of the same hardware in most cases and we ALL love a good beep.

    I 100% agree the software stack shouldn’t be on there. But, as the blog post points out, there is a LOT of developmental code and packages in that image that shouldn’t be. It is likely just a case of not removing unnecessary packages from the base image.

    Because… the entire point of a device like this is that you plug it in somewhere you aren’t. MAYBE JetKVM corp can hear me muttering profanity or wondering where I left that USB c splitter when I am trying to assemble it the first time. The rest of the time? It is plugged into the back of a server that I am booting up so that I can install proxmox without having to drag a monitor over. And while you can potentially get some juicy info out of that? It is not at all worth the hassle to set up fake companies and market a fake (moderately high demand in the right circles) device.

  • GreenKnight23@lemmy.worldEnglish
    38·
    11 days ago

    I had several IOT smart plugs that have GPS built in.

    why? why would it need to know its exact geographic location?!

    after that I created an entire hardware segmented network that’s specifically used for IOT and cameras.

    last I checked the router/firewall it’s on has blocked over 11million requests a month trying to access the outside.

    I will never have a “smart” device in my home that’s connected to the internet. I’ll live like it’s the 1930s if I ever have to.

    • Auli@lemmy.caEnglish
      2·
      9 days ago

      I’ve done the same but that request number is BS. Of course it keeps retrying cause it couldn’t get an answer. It does not mean if it could connect it would connect 21 million times.

    • ripcord@lemmy.worldEnglish
      13·
      11 days ago

      I have this hacking tool called “passwd” which is useful for hacking. Also one called “Linux”

  • Retro_unlimited@lemmy.worldEnglish
    8·
    11 days ago

    I was really sketched out with my BLI-KVM. I had a server that was off, when I booted it the bios was in Chinese. Although someone did say that motherboard had a flaw that would do that, I wasn’t Sure if it was the KVM or the motherboard, but still…

    • Auli@lemmy.caEnglish
      2·
      9 days ago

      No critical thinking I guess. How the hell would a KVM flash your BIOS or more likely UEFI.

      • planish@sh.itjust.worksEnglish
        1·
        9 days ago

        It could probably change the language selector.

        If I’m an elite hacker spy who works for the hacker spy division of the Chinese army, am I going to change the system language of the thing I am hacking to Chinese and forget to change it back?