O2 Joggler Forum

Hi Mike and welcome to the forum ! Have a look at this : http://www.jogglerwiki.com/forum/viewtopic.php?f=2&t=1492 Other people had the same/similar problem, so I guess if you ask roobarb! nicely, perhaps he could do the same again, as I'm getting a 404 on the dropbox link. I don't know what you...

Pete, it's good of you to explore this. I asked some questions of you earlier, the reason being, I thought it might be a way to give people with unmodified joggler's or using PNP3 to keep them going with a fresh source of apps. I've no idea what it is like to use an unmodified joggler or PNP3. I'm i...

Looks good

Do you have a few example URLs...

And is it possible to get the movie id without being logged in to the website i.e. without having a chumby account ?

Do you have a vanilla Joggler to try these on ? (may be stupid question...)

Pete

Are you able to get craig_1234's instructions above to work ? Or is there a bit more to it ? Is the SWF app somehow associated and limited to the Chumby and/or Chumby account ?

Pete It would be great if you could try out some of the chumby apps on the standard Joggler OS. Is PNP3 essentially the same ? If so maybe to try them on there as well. Would be good to know as it would provide maybe a good source of apps for people who would like to use their Jogglers as they were ...

Maybe some of these would be of interest as well : http://www.pjrc.com/store/teensy.html http://www.pjrc.com/teensy/usb_keyboard.html More on using arduinos : http://forum.arduino.cc/index.php?topic=93191.0;wap2 http://mitchtech.net/arduino-usb-hid-keyboard/ http://hackaday.com/2012/06/29/turning-an...

This website looks like the best I have seen so far : https://shellshocker.net/ There now appears to be 6 unique vulnerabilities and exploits for each. This number will likely grow as, from what I understand, Bash has some fundamental issues. There is a script that can be downloaded and each of the ...

Hi all I've just installed and am running xubuntu 14.04 on my Joggler. Everything seems good except that the time/date resets every time the joggler reboots. When I try to set the clock to update automatically I'm told that 'NTP support is not installed' and gives me the option to install. Installi...

The Joggler is a well made, iconic (to me anyway) piece of hardware. And it is your distros, BuZz, that allow the Joggler's full potential to be realised. I have some very important systems using your Ubuntu base 24/7 and they have been incredibly solid, I am happy to say. I have learned a great dea...

The Joggler with the right operating system should have no problems seeing the device as a HID. The betting shop Jogglers sold a few months ago actually used an Olimex MOD-RFID125 USB dongle, which presented itself as an HID to the Joggler. I presume this was used to identify who the punter was. How...

Answering my last question - tools to test for this vulnerability. I found these : http://shellshock.brandonpotter.com/ http://www.shellshocktest.com/ https://twitter.com/lukashed http://bashsmash.ccsir.org/ and have done some quick tests. I don't know how comprehensive, effective or trustworthy the...

I think it should, because as far as the Joggler is concerned it is a HID (?Human Interface Device?), just like a keyboard or a mouse. What Operating System are you running Squeezeplay on ? This is where you might want to check what support is available for the device. I think that the device just g...

That's good to hear roobarb! It makes sense that busybox would have been used and I found this on a Google search too : http://www.jogglerwiki.com/wiki/Updated_busybox_%28including_httpd%29 which indicates what is included in the BusyBox of the default Joggler OS. Thanks to buying betting shop joggl...

I haven't checked my self and I'd prefer to comment from actual experience, but from the comments so far, I get the impression that the Joggler with the O2/Default/OpenPeak OS is vulnerable. Maybe for the typical Joggler user (i.e. someone who bought the Joggler to use as it was intended - are there...

I think these should explain far better than I can : https://en.wikipedia.org/wiki/Shellshock_%28software_bug%29 I think this should be essential reading, and will no doubt be updated very frequently. Of particular note is the section : https://en.wikipedia.org/wiki/Shellshock_(software_bug)#Exploit...

I think that, at the moment, the risk of the vulnerability being exploited on your own devices is more likely from a user initiated action, for example visiting a website (even well known and trusted websites can be modified, and you would not know about it) or opening an attachment in an email. The...

Seems that all versions of Bash up to and including 4.3 are vulnerable : https://security.stackexchange.com/questions/68168/is-there-a-short-command-to-test-if-my-server-is-secure-against-the-shellshock-b Although there may be some future subversions of 4.3 that actually fix the issue. I have been c...

Nice pics Pete ! The fuse looks a lot bigger then the diode, so it should be easier to replace or even go for the fuse off the board solution. I haven't done this sort of thing before, but if you can find on old piece of SMD circuit board you could practice component removal and addition on that. Th...

As I use Ubuntu 12.04 and 14.04 base, this vulnerability is of particular interest : https://www.cert.gov.uk/resources/alerts/update-bash-vulnerability-aka-shellshock/ I've just upgraded a 14.04 Ubuntu base to the latest and tried the vulnerability test : env x='() { :;}; echo vulnerable’ bash -c “e...

Not speaking from experience, but if you can bridge the fuse pads, I guess by soldering on a small length wire strand between the two solder pads for the SMD (Surface Mount Device) fuse, then it should also be possible to solder two wire strands that can be connected to a discrete component size (i....