Stories
Slash Boxes
Comments

News for nerds, stuff that matters

Slashdot Log In

Log In

Create Account  |  Retrieve Password

Neopwn, the World's First Pentesting Mobile Phone

Posted by timothy on Sun Sep 21, 2008 02:05 PM
from the data-rate-plan dept.
thefanboy writes "What do you get when you cross BackTrack Linux apps with a mobile phone? This is the first ever publicly available mobile phone running a full custom Linux network auditing distribution, and it runs it surprisingly well. One can literally go from phone to pwn in 2 seconds. Based off of the Openmoko Neo Freerunner, many steps have been taken to compensate for the lack of a QWERTY keyboard with automation scripts, dialogs, and a point-and-pwn menu. It runs applications such as Metasploit and the Aircrack suite quite well, especially given the fact that it supports a wide array of USB WLAN cards."
+ -
story

Related Stories

This discussion has been archived. No new comments can be posted.
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
 Full
 Abbreviated
 Hidden
More
Loading... please wait.
  • by ttlgDaveh (798546) on Sunday September 21 2008, @02:09PM (#25094737) Homepage
    'pwn' drives me nuts. In my eyes the use of it seriously undermines any project and gives the impression that it is presided over by annoying 13 years olds which, in turn, pretty much makes me dismiss it.
    • by couchslug (175151) on Sunday September 21 2008, @02:22PM (#25094907)

      "'pwn' drives me nuts. In my eyes the use of it seriously undermines any project and gives the impression that it is presided over by annoying 13 years olds which, in turn, pretty much makes me dismiss it."

      Even if it is accompanied by trendy, fresh terms like "Neo" ???

    • Re: (Score:3, Insightful)

      Try and remember how you were when you were 13. I've noticed a strong tendency for annoying 13 year olds to write damn good code. They're idealistic, trying to prove themselves, and don't have anything better to do; dealing with a little language silliness is a small price to pay.

      Seriously, I'd trust code written by 13 year olds a lot more than that written by major companies.

      • by cbreaker (561297) on Sunday September 21 2008, @02:35PM (#25095065) Journal

        "Seriously, I'd trust code written by 13 year olds a lot more than that written by major companies."

        Then you'd be stupid.

        Sure, a young kid can write some novel little things, but serious software? No. It does in fact take teams of people do to that - in the OSS world or corporate world (or as often is the case, a mix of the two.)

        Generally speaking, 13 year old boys don't do much on the Internet except beg for shit, yell at shit, and talk shit. Lots of shit is involved.

        It's not limited to 13 year olds, but it sure is true for many 1st person shooter type games. I used to enjoy playing games like CS and stuff with my friend but we both eventually got tired of the little kiddies ruining every game.

        • by m50d (797211) on Sunday September 21 2008, @03:35PM (#25095769) Homepage Journal
          Sure, a young kid can write some novel little things, but serious software? No. It does in fact take teams of people do to that - in the OSS world or corporate world (or as often is the case, a mix of the two.)

          No it doesn't. Any piece of software actually large enough to need a team (which is a far far smaller number than the number which are generally written by team) should be separated into smaller components. A single good coder beats a team - of any size - every time; I've lost count of the number of times I've seen a kid write a superior replacement for something that took a major corp. six months in one 36-hour shot.

          Generally speaking, 13 year old boys don't do much on the Internet except beg for shit, yell at shit, and talk shit. Lots of shit is involved.

          95% of everything is shit. Yes, a lot of 13 year olds are doing shit, but they aren't the ones who are writing and releasing code.

          It's not limited to 13 year olds, but it sure is true for many 1st person shooter type games. I used to enjoy playing games like CS and stuff with my friend but we both eventually got tired of the little kiddies ruining every game.

          You'd be surprised how many of those "kiddies" are actually in their 20s or worse.

      • Re: (Score:2, Insightful)

        by Anonymous Coward

        Seriously, I'd trust code written by 13 year olds a lot more than that written by major companies.

        I don't trust a 13 year old kid to wash my car, let alone do something like write software for me. Wait until they've gone to school and got a bit of experience doing actual work, and then we'll talk.

    • I know. Any company that can't use the proper 0wn3d or cl0wn3d isn't getting my business.
      • Interestingly enough, the most commonly known uses of Neo began with things like Neo-Nazi and Neoconservatism (which was intended to be a criticism.)

        I think using the word Neo for anything is annoying.
        Just say NEW.

        • Neo is older than new and comes from the Greeks to mean new or young. So maybe you should be using neo rather than that neoterm new.
          • Re: (Score:3, Interesting)

            The word "conservatism" is being used to mean "the principles and practices of political conservatives" in that context. A new variant of principles and practices by political conservatives is quite obviously a legitimate condition and neoconservatism describes it without confusion. "Newstickwiththeold" certainly doesn't make sense, both as a word and as a conceptual breakdown of the term neoconservative.

  • Now, you might disagree with me, but I think this officially means that the NSA and other government agencies (I'm looking at you Alaska) need to work extra hard to ensure their networks are locked down good.

    Point and click becomes point and own? Maybe not that easy, but All your AP are belong to us is going to happen soon enough. One thing that Linux and F/OSS definitely does do; puts real software and OS in the hands of those that the NSA would rather not need to worry about.

    I see a rather large police st

    • by ColdWetDog (752185) * on Sunday September 21 2008, @02:29PM (#25094979) Homepage

      (I'm looking at you Alaska)

      Actually, the IT infrastructure in the State of Alaska is reasonably good. What you are asking for is that Alaska politicians understand the difference between .ak.gov and yahoo.com. Not only that, you're asking for Alaska politicians to not circumvent that difference whenever they feel it's convenient.

      Fat Chance. Remember, this is the state that created the Tubes [wikipedia.org]. And that thinks boiled Moose noses [nytimes.com] are delicacies.

  • Place your bets (Score:5, Insightful)

    by cmacb (547347) on Sunday September 21 2008, @02:35PM (#25095063) Homepage Journal

    Will the reaction to such devices be to strengthen the security of our cellular networks, or to simply outlaw such devices?

    Hmmmm, ponder, ponder, ponder.

    My money is on the latter.

  • The anti-iPhone: the Linux telephone that operates entirely from the command line! The Ultimate One-Dimensional Desktop! [today.com] What can't you do with a bash prompt?

    (The v2 version will, of course, run Emacs and be programmed entirely in eLisp written on the fly.)

  • No monitor mode (Score:3, Interesting)

    by oddeirik (970950) on Monday September 22 2008, @07:06AM (#25101751)

    or packet injection with the built-in wifi module:

    "Note that the current firmware limitations of the internal wireless does not allow for monitor mode nor packet injection. An external USB WLAN is required for this type of operation."

    I like how an external adapter can be an option, but as of now it's a requirement. This sort of ruins the image of this being "a powerful discreet network auditing tool for the penetration tester", atleast for me.
    (They do mention that it's the current firmware limiting this, but there's nothing about if and when they'll "fix" this)

  • Seriously, though... (Score:3, Interesting)

    by Simon Brooke (45012) <stillyet@googlemail.com> on Monday September 22 2008, @08:38AM (#25102393) Homepage Journal

    This looks like the quickest way to get open source phones banned off every network that you can imagine. So it looks like a big fat juicy own goal, to me.

  • umm what (Score:3, Insightful)

    by poot_rootbeer (188613) on Monday September 22 2008, @10:01AM (#25103413)

    Neopwn ... Pentesting ... BackTrack ... pwn ... Openmoko Neo Freerunner ... Metasploit ... Aircrack

    Can anyone point me in the direction of an article-to-English dictionary?

    • Re:GPL Violations (Score:4, Informative)

      by schon (31600) on Sunday September 21 2008, @05:23PM (#25096823) Homepage

      on their site the cheapest option is $80... with a SD card and dvd thrown in but again no source code download available...

      It didn't occur to you that the source code of the GPl'ed components could be on the DVD or SD card?

      What on earth makes you think that they have to provide downloads of their software?