Beta
×

Welcome to the Slashdot Beta site -- learn more here. Use the link in the footer or click here to return to the Classic version of Slashdot.

Thank you!

Before you choose to head back to the Classic look of the site, we'd appreciate it if you share your thoughts on the Beta; your feedback is what drives our ongoing development.

Beta is different and we value you taking the time to try it out. Please take a look at the changes we've made in Beta and  learn more about it. Thanks for reading, and for making the site better!

Hacking the D-Link DPH-128MS VOIP Phone

Unknown Lamer posted about 2 years ago | from the but-does-it-run-netbsd dept.

Hardware 26

An anonymous reader writes "I've been working on reverse engineering the D-Link DPH-128MS VOIP phone. It's an end of life product for D-Link but a neat little desktop phone that runs Linux. I've figured out a way to exploit the tftp server running on it to get root access. I'm at the point now of trying to figure out how to update the phone with more files. Check out the writeups I have and the scripts on the link above."

cancel ×

26 comments

Sorry! There are no comments related to the filter you selected.

Sweet (4, Insightful)

Nyder (754090) | about 2 years ago | (#41389753)

This belongs more on Hack a day, or somewhere, but nice job.

Re:Sweet (3, Funny)

Anonymous Coward | about 2 years ago | (#41389827)

What is this crazy 'tech stuff' doing on this site?!

Re:Sweet (0)

Anonymous Coward | about 2 years ago | (#41390157)

Came for the phone stuff, left disappointed there wasn't railing against Crapple iSheep becuase it doesn't have SD cards for storing pirated animes.

Re:Sweet (4, Funny)

pla (258480) | about 2 years ago | (#41390199)

What is this crazy 'tech stuff' doing on this site?

Meh, y'know... Slow day for lawsuits, politics, and Apple press releases. Gotta fill the front page with something.

Re:Sweet (3)

aaaaaaargh! (1150173) | about 2 years ago | (#41390625)

On the contrary, I'd like to see more stories like that. 'Cos the constant flow of recent iPhone and web-monkey stories on /. is definitely not news for nerds...

Re:Sweet (0)

Anonymous Coward | about 2 years ago | (#41390869)

whoosh

Re:Sweet (1)

p0p0 (1841106) | about 2 years ago | (#41391935)

Parent is right in the fact that there are so many neat hacks out there that HackADay can cover more and is dedicated while /. has to pick and choose and be more broad in what they feature, otherwise everything else will just get drowned out.

Mikko (1)

jones_supa (887896) | about 2 years ago | (#41390035)

When he runs strings against full.img and finds "/home/mikko/release_p125/kernel/linux-2.4.17_mvl21/include/linux/dcache.h", Mikko is a popular Finnish men's name. So possibly some Finn was involved in creation of the phone.

Re:Mikko (1)

pla (258480) | about 2 years ago | (#41390177)

Ya think?

Like, maybe Linus Torvalds, born December 28, 1969 in Helsinki, Finland? ;)

Re:Mikko (1)

mkkohls (2386704) | about 2 years ago | (#41390883)

Like, maybe Linus Torvalds, born December 28, 1969 in Helsinki, Finland? ;)

So he changed his name to mikko just to make this phone. That's one dedicated Finn.

Re:Mikko (0)

Anonymous Coward | about 2 years ago | (#41391033)

You memorized his date of birth, didn't you?

what exactly does he want out of the phone? (0)

wierd_w (1375923) | about 2 years ago | (#41390409)

I mean, there *is* pure enjoyment from digging into the inner workings of the beast, I'll grant that, but ultimarely, what is his major goal with hacking this voip phone?

It surely doesn't have very much NVRAM, or other permanent storage, so using it as a cleverly disguised file server is out of the question... it probably has a purpose built SoC processor, so using it for some processor intensive function is a whimiscally silly idea...

Short of unlocking it for use with arbitrary voip systems, or as a spybug for cubicle drones, I don't see the utility in hacking a voip phone... even as a passive network sniffer, the lack of large internal storage makes it less than useful.

He might shred it apart to see if there is a gpio serial header that he could attach an sdcard to (bitbash mode), which would make it a little more interesting, since it does internet radio, so this would let it have an internal cache of mp3 files to play, as well as enable weak function for some of the other possible uses I mentioned..

But really, this seems like a lot of work, over an end of life phone...

Re:what exactly does he want out of the phone? (2)

ThatsMyNick (2004126) | about 2 years ago | (#41390891)

Add new protocols (get it to support the Opus codec). Get it to record calls. There are lots of things you can do.

Re:what exactly does he want out of the phone? (1)

wierd_w (1375923) | about 2 years ago | (#41391013)

Recording calls requires either permanent storage, or sacrifice of a fair chunk of its very minimal ram compliment for a block device, unless you want to set it up to save calls to an SMB share or something.

That's why I was asking.

Re:what exactly does he want out of the phone? (1)

ThatsMyNick (2004126) | about 2 years ago | (#41391143)

I would happy if I can occasionally record calls, even for a very short time.
 
And you clearly are using you imagination if you dont see much purpose in hacking the device. One can set it up as an XMPP client (which can inturn be used for Google Chat/Talk), one can possibly set it up a skype client, one can add plenty of protocols that are not supported.

Re:what exactly does he want out of the phone? (0)

Anonymous Coward | about 2 years ago | (#41391545)

Recording calls requires either permanent storage, or sacrifice of a fair chunk of its very minimal ram compliment for a block device, unless you want to set it up to save calls to an SMB share or something.

If you're making a phone call with a voipphone, you've got a network connection, so exactly that. Although I'd say set up your own asterisk voip server and handle the call recording there, if the recording is all you want.

Re:what exactly does he want out of the phone? (0)

Anonymous Coward | about 2 years ago | (#41390895)

Short of unlocking it for use with arbitrary voip systems

Yep, that sounds like the obvious reason...

He might shred it apart to see if there is a gpio serial header that he could attach an sdcard to (bitbash mode), which would make it a little more interesting, since it does internet radio, so this would let it have an internal cache of mp3 files to play, as well as enable weak function for some of the other possible uses I mentioned..

Being an IP phone, and thus generally connected to a network, I imagine you could use a network filesystem. Not for the spy-gadget scenarios, of course, but frankly that's the least interesting application unless you can find a remote exploit to subvert an installed phone.

Re:what exactly does he want out of the phone? (1)

Dishevel (1105119) | about 2 years ago | (#41391855)

unless you can find a remote exploit to subvert an installed phone.

Like, ummmm, I don't know .... tftp or something????

Re:what exactly does he want out of the phone? (0)

Anonymous Coward | about 2 years ago | (#41391657)

I mean, there *is* pure enjoyment from digging into the inner workings of the beast, I'll grant that, but ultimarely, what is his major goal with hacking this voip phone?

He could turn it into a robocaller :)

Tro77 (-1)

Anonymous Coward | about 2 years ago | (#41390501)

dim. Due to t4e

use a redirect (0)

Anonymous Coward | about 2 years ago | (#41390819)

your code doesn't interpret anything as is so you should be able to echo >/tmp/foo '[CTRL+M]
';chmod 755 /tmp/foo;/tmp/foo

if not it's quite possible busybox can open sockets or you can just tftp the binary

Re:use a redirect (0)

Anonymous Coward | about 2 years ago | (#41390839)

you have to paste the BI-MIPS elf between after the CTRL+M and don't newline before the ending '

Nice work (1)

WinstonWolfIT (1550079) | about 2 years ago | (#41390879)

Usually breaking into a device comes with a simple "hi y'all, my l33t". An actual breakdown of getting in was a very refreshing read, even if the author wasn't quite "l33t"

Put Asterisk on it.. (1)

RightSaidFred99 (874576) | about 2 years ago | (#41391083)

Then it can be its own VOIP server as well. Hawt.

Modifying the filesystem (0)

Anonymous Coward | about 2 years ago | (#41391185)

It may be a less graceful approach than he's looking for, but a good soldering iron and a cheap Chinese EEPROM burner does wonders for all of my cable modems and hacked up NES games. The same approach would probably work here as well.

Re:Modifying the filesystem (1)

plover (150551) | about 2 years ago | (#41394369)

He's trying for a "hack once, 'sploit everywhere" solution, which is a lot more valuable than a simple hardware mod.

Check for New Comments
Slashdot Login

Need an Account?

Forgot your password?

Submission Text Formatting Tips

We support a small subset of HTML, namely these tags:

  • b
  • i
  • p
  • br
  • a
  • ol
  • ul
  • li
  • dl
  • dt
  • dd
  • em
  • strong
  • tt
  • blockquote
  • div
  • quote
  • ecode

"ecode" can be used for code snippets, for example:

<ecode>    while(1) { do_something(); } </ecode>