1. Computers
  2. Display Drivers
  3. Graphics Cards
  4. Memory
  5. Motherboards
  6. Processors
  7. Software
  8. Storage
  9. Operating Systems


Facebook RSS Twitter Twitter Google Plus


Phoronix Test Suite

OpenBenchmarking.org

SplashTop Linux Security Hole Discovered

Free Software

Published on 08 August 2008 04:54 PM EDT
Written by Michael Larabel in Free Software
4 Comments

Less than two weeks ago we shared that SplashTop Linux was hacked to run off a USB stick, run custom applications, and more importantly having it run on non-certified motherboards (meaning those not sold by ASUS with SplashTop's instant-on Linux environment embedded). These hacks were done by members of our Phoronix Forums, but now a security hole has been discovered. Kano, a member of the Phoronix Forums and the mastermind behind the Debian-based Kanotix distribution, has discovered a serious security problem.

SplashTop Linux Security Hole Discovered


On at least some versions of this unique Linux distribution, contents of attached USB devices and Windows partitions are exposed via the network. If you're not running a router-based firewall (SplashTop has no firewall) or a dedicated hardware firewall, the contents can then be accessed anonymously. All of these files can be viewed over HTTP on port 1080.

Kano originally noted this problem in the Phoronix IRC channel and this forum thread. DeviceVM, the company behind SplashTop, is currently looking into this problem.

Latest Linux Hardware Reviews
  1. 13-Way Low-End GPU Comparison With AMD's AM1 Athlon
  2. ASUS AM1I-A: A Mini-ITX Board For Socketed Kabini APUs
  3. Mini-Box M350: A Simple, Affordable Mini-ITX Case
  4. Overclocking The AMD AM1 Athlon & Sempron APUs
Latest Linux Articles
  1. Ubuntu 12.04.4 vs. 13.10 vs. 14.04 LTS Desktop Benchmarks
  2. AMD OpenCL Performance With AM1 Kabini APUs
  3. A Quick Look At GCC 4.9 vs. LLVM Clang 3.5
  4. Are AMD Athlon/Sempron APUs Fast Enough For Steam On Linux?
Latest Linux News
  1. Wine 1.7.17 Works On Its Task Scheduler, C Run-Time
  2. The Improv ARM Board Still Isn't Shipping; Riding A Dead Horse?
  3. Debian To Maintain 6.0 Squeeze As An LTS Release
  4. Wasteland 2 Is Finally Released For Linux Gamers
  5. FreeBSD Advances For ARM, Bhyve, Clang
  6. Ubuntu 14.04 LTS "Trusty Tahr" Officially Released
  7. Ubuntu 12.04 LTS vs. 14.04 LTS Server Benchmarks
  8. QEMU 2.0 Released With ARM, x86 Enhancements
  9. Running The Unity 8 Preview Session On Ubuntu 14.04 LTS
  10. R600 Gallium3D Disables LLVM Back-End By Default
  11. Fedora 21 Gets GNOME 3.12, PHP 5.6, Mono 3.4
  12. Fedora Workstation Is Making Me Quite Excited
Latest Forum Discussions
  1. Suggestions about how to make a Radeon HD 7790 work decently?
  2. The GNOME Foundation Is Running Short On Money
  3. Updated and Optimized Ubuntu Free Graphics Drivers
  4. Radeon 8000M problematic on Linux?
  5. Linux Kernel Developers Fed Up With Ridiculous Bugs In Systemd
  6. After Jack Keane, RuseSoft will briing Ankh 3 to Linux through Desura
  7. Suspected PHP Proxy Issue
  8. Change installation destination from home directory