Abusing the Internet of Things

(Rick Simeone) #1
/media/exe.img/Runtime/bin:
total 7228
drwxr-xr-x 2 root root 103 Apr 28 2013.
drwxr-xr-x 9 root root 152 Apr 28 2013 ..
-rwxr-xr-x 1 root root 4356171 Apr 28 2013 compiz
-rwxr-xr-x 1 root root 17237 Apr 28 2013 fc-cache
-rwxr-xr-x 1 root root 14044 Apr 28 2013 gdk-pixbuf-query-loaders
-rwxr-xr-x 1 root root 3010259 Apr 28 2013 X
-rwxr-xr-x 1 root root 2241 Apr 28 2013 xorg.conf

Here’s a snippet from the xorg.conf file:

Section "Screen"
Identifier "Mali Screen"
Device "Mali FBDEV"
Monitor "Mali Monitor"
DefaultDepth 24
SubSection "Display"
ViewPort 0 0
Modes "1920x1080@60" "1024x768" "1280x720" "960x540@60"
"960x540@50"
"720x576" "1920x720@50d" "720x480" "960x1080@50"
"960x1080@60"
"1920x540@60" "1920x540@50"
EndSubSection
EndSection

This appears accurate since the firmware we are looking at is for an HD-capable TV and
the true HD resolution is 1920 x 1080, which is listed as the first preference. Other resolu-
tions are also available.
Another interesting item to note on our cursory quest to understand the underlying sys-
tem is the presence of .cmk files:


$ ls -l /media/exe.img/infolink/manager/*.cmk
-r--r--r-- 1 root root 640 Apr 28 2013 /media/exe.img/infolink/manager/
config.xml.cmk
-r--r--r-- 1 root root 11872 Apr 28 2013 /media/exe.img/infolink/manager/
index.html.cmk

These are “encrypted” files, but the keys for them have already been leaked and are avail-
able on the SamyGO forum (Figure 5-4).


140 CHAPTER 5: THE IDIOT BOX—ATTACKING “SMART” TELEVISIONS
Free download pdf