Time |
Nick |
Message |
05:11 |
|
RBecker joined #evergreen |
13:44 |
dbs |
jeff: what vulnerability? |
17:35 |
jeff |
using a barcode scanner to transmit unexpected/unanticipated keystrokes to a host system, especially things like control characters and commands/scripts instead of just data. |
17:35 |
jeff |
actually, i think i demonstrated or described it to you at the first evergreen conf. |
17:36 |
jeff |
had a lot of fun trial-and-erroring some theories on barcode scanners prior to that, demonstrated to co-workers, got the "i'm glad you're on OUR side" compliment from one. :-) |
17:38 |
rangi |
you can reliably crash most self check machines doing that |
17:42 |
jcamins |
rangi: you can reliably crash most self check machines by turning them on. |
17:42 |
rangi |
tis true |
17:43 |
rangi |
there's hours of fun to be had with some writable nfc stickers and a phone |
17:43 |
rangi |
most will crash with the equiv of a buffer overflow if you present the self check machine with an nfc card that has a massively long barcode |
17:44 |
rangi |
most fragile 10k+ machine you'll ever meet |
19:02 |
|
dcook joined #evergreen |
20:32 |
|
eby joined #evergreen |
20:37 |
|
kmlussier joined #evergreen |
20:37 |
|
mceraso joined #evergreen |
20:37 |
|
bshum joined #evergreen |