Download HD Download MP4 Download XviD Download WMV

Tethering TOS and IP Spoofing

Brice writes “Thanks for showing how to tether Droid with Ubuntu. I use them both quite often.
I was wondering if tethering the Droid is against the TOS/Verizon contract.”

Well Brice, technically it may be a violation of your carriers terms of service. I know at least with Verizon’s Wireless business accounts there is an additional fee, around $30/mo I believe, for tethering with a smartphone like a blackberry.

I can also say from personal experience having tethered since 2001 on both Sprint and Verizon, that as long as you stay under the 5-gig cap you should be ok. Programs like June Fabrics PDAnet allow one to tether on most platforms and, from what I hear from my telco buddies, the carrier can’t tell the difference between the traffic originating from the phone or your laptop. I haven’t heard any horror stories of penalties for using such application however I’d be curious to hear from our audience if such a thing has happened in the past.

Kuroha write “I want to use Spotify, the new music service, but I keep getting this error:
Unfortunately, due to licensing restrictions we are not yet available in your country. We understand that you are currently in United States. How do I spoof my IP so it looks like I’m in Finland?”

Kuroha, there is a misconception about IP Spoofing that’s simply summed up by saying this. The source address of your computer is part of the IP packet header. There are plenty of programs out there that will let you spoof this source port, including our favorite tool nmap. However, like a return address on postage, unless you’re in a position to listen to the replies to your spoofed packets (such as on a local network) you aren’t going to get anything useful back from the server.

What you’re more likely referrencing isn’t IP Spoofing as much as it is simply bouncing your traffic off a server in another country — typically done to anonymize Internet traffic or for secure tunneling on untrusted networks. The SSH tunneling with dynamic SOCKS proxies we’ve been talking about recently will do the trick. It’s just a matter of finding a cheap shell, VPS or other server that allows tunneling in the country of your choosing.

Don’t forget this month’s LAN Party is Left 4 Dead 2. We’ll be playing at game.hak5.org Saturday and Sunday, January 2nd and 3rd. Hope to see you there!

World of Goo Mods

Recently I’ve been playing a lot of World of Goo. It’s an amazingly simple and fun game. I’ve been playing on the Wii but soon after arriving in Toronto Jenn Cutter picked up the title for her tablet and has been dabbling with the mods.

If you’re interested in making your own levels, or downloading fan-created levels and other mods be sure to check out GooFans.com — they also have a great forum on modding.

This week’s trivia question is: “World of Goo developers shares the same open source physics engine as what 2007 first-person shooter?” Answer at hak5.org/trivia and be entered to win Pronobozo’s album Zero=One=Everything.

Easy Linux drive encryption with Cryptsetup

When it comes to Linux, I love super user friendly and powerful utilities. This is one such tool. Since the 2.6.4 kernel drive encryption has been built in, and this tool cryptsetup makes setting it up a breeze. Follow along in this tutorial as I keep my secret thumb drive free from prying eyes.

I’ve gotta give props to Peter Savage for sending this my way. Check out his SciFi fantasy novel Emblem Divide — it’s wicked good.

Wallpaper Contest: Best 2010 “New Years” Hak5 Wallpaper! Get creative and submit your wallpaper to Hak5.org/forums under the Community Images board.

Ultralight Notebooks

Chris writes: “I was wandering if you could suggest a laptop that is lightweight, long battery life, 13.3 inch screen, with Win 7. Budget of $1000″

Chris, I recently did just this research. I was looking for a notebook to edit the show on the go — which isn’t easy considering the heaft and hunger of those AVCHD video files. If you’ve been watching the show for a while you also know I’m the netbook boy. First with the 7″ eeePC, then the 9″ Aspire One, and more recently the 10″ Nokia Booklet 3g. The next step up to get a “real CPU” is 13.3″ — a sweet spot of performance and portability.

What I found was that ultra-light, ultra-long battery life is in. These sweet new Consumer-Ultra-Low-Voltage (culv) chips from Intel and AMD are sexy. I thought I would need a 35 watt Core i7, or at least a 25 watt 2.2GHz or faster Core2Duo to edit on the go — but I lucked out with the 10 watt 1.3ghz SU7300 Core2Duo chip from Intel.

The video editing performance of the ASUS UL-series notebook I ended up with is aided by hardware accellerated video processing in the GMA 4500 M HD. AVC, VC1 and h.264 decoding are offloaded to the graphics chip. In Windows 7 Home Premium I’m able to playback 17mbps AVCHD in WMP using only 20% CPU. Not bad at all.

So if you’re willing to live without an optical drive an ultralight notebook may be the best choice for you. The performance seems enough and the battery life is steller. I’ve seen prices in the $650 – 900 range so take a look at the ASUS UL, Acer Timeline, Dell Inspiron Z, Samsing X and Lenovo U series notebooks. Just be sure to get a Core 2 Duo — I’m not reading great things about the Core 2 Solo part. SU7xxx and SU9xxx seem to be where it’s at. For now. We’ll likely see a lot more of these slim buggers at CES.

I want to give a special thanks to our crew for being so supportive while I was in hospital. Shannon did a wonderful job of taking care of the hakshop and mailing out all the orders while I was away. Thanks Revision3 for understanding about the late episode, Sentara for their open wifi and hot nurses, and a big thanks to our loyal fans. All of well wishes on twitter, facebook and youtube, the forums and IRC brightened my day every day. And DigiPirate, thanks for the awesome USB Dalek Webcam. Exterminate!! Exterminate!!

Let’s face it, the Nintendo DS is a happy little platform full of hacking potential. And with a well established homebrew community it’s the perfect device to start your next weekend project with. Jason takes you from Homebrew 101, including carts and roms, to getting the Dev tools and building your first Hello World app.

Download HD Download MP4 Download XviD Download WMV

—
Title: Virtual Routers?
Time: 3:20
Keywords: virtual router, virtual machine, vm, virtualization, vmware, virtualbox, cisco, nexus, nexus switch, cisco nexus, nexus 1000v, nexus 1000

Joe Switch writes in to ask what the deal is with Virtual Routers and other such untangable networks. Matt has the answer. The way I understand it your more high end (read: expensive) Cisco and Juniper routers have virtual routers built in — much like you might have a virtual interface like eth0:1 in Linux — to manage VLANS, IP subnets and such.

Matt goes on to explain that in the vSphere product by VMware you can use the APIs to write, basically, a software based switch to compliment your existing deployments. Check out the Cisco Nexus 1000V. It’s a software implementation of a Cisco Nexus switch. I’d love to get my hands on it but at nearly $1000/year I’ll find something open source. Speaking of which, we’ve been meaning to play with a Cisco virtual network application but are in need of an ISO. If you’re privy to an open source alternative or can help out drop us a line.

Make your own Nintendo DS Games for free!

If it begins with a #include and ends in a semi-colon our friend Jason Appelbaum is all over it. This week he’s in studio covering a subject near and dear to our hearts — Nintendo DS Homebrew.

Let’s face it, the Nintendo DS is a happy little platform full of hacking potential. And with a well established homebrew community it’s the perfect device to start your next weekend project with. Jason takes you from Homebrew 101, including carts and roms, to getting the Dev tools and building your first Hello World app.

For more see JasonAppelbaum.com or email jason@hak5.org

Mac tunneling the free and easy way

Paul can’t hide behind the camera forever, and this week we’re pleased to have him break down the free and easy way to SSH Tunnel on a mac. After Hak5 viewer Lavi wrote in about SSHTunnel 1.6 Paul was happy to check out the program. Thanks for sending in your freeware picks!

SSH Tunneling the cross-platform way with Python and PHP

Another great bit of feedback from the SSH Tunneling segment in episode 614 was from Jan-Marten in The Netherlands. His Hak5 inspired cross-platform Python and PHP scripts, available from his blog johmanx.com allow you to easily configure and save SSH tunneling options. Awesome code Jan-Marteen, thanks for sending it in!

Of course if you have feedback for the show, code you’d like to send by, tips on legally acquiring a cisco IOS, freeware you want to let us know about, questions, or criticisms just write us: feedback@hak5.org

And don’t forget to check out the Hak5 Store for our holiday sale on all new Hak5 T-Shirts, hacked gadgets, pineapples, monkeys and more.

Download HD Download MP4 Download XviD Download WMV

While Shannon’s on vacation our friend Jenn Cutter from Open Alpha joins us to talk about the recent developments in PSP hacking and homebrew.

The PSP homebrew scene has grown more interesting over the past little while since the user base has been sectioned off into different camps based on the particular unit they purchased and whatever firmware they are using. Thanks to the efforts of Team Typhoon, ChickHEN (homebrew enabler) permits owners of all models to run the unofficial apps and games they’ve grown to love without touching the flash of the PSP, so there’s no worrying about turning it into a brick. No one likes expensive bricks. Keep in mind that ChickHEN is not a piracy tool so don’t expect to run any type of backups though it. Davee has the lowdown on the latest release which can be downloaded here. If you are curious or sceptical, feel free to check out video proof that it works on PSP 3000s.

–Jenn Cutter

Matt answers your questions about storage area networks and recommends QNAP. If you’re feeling hands on rolling your own is a great option too. Matt points out his favorite hardware like 3Ware RAID cards, Transcend IDE Flash Modules, and the Intel Storage Server SSR212MC2. Software wise it’s worth investigating Freenas, and SAN Melody.

Continuing on with Eighty’s segment on extracting windows executables from packet captures and Mubix’s segment on network tap analizers, Darren’s taking a look at the open source tool ngrep. If you’re familiar with grep you’ll be at home with this tool. Darren demonstrates using the tool to filter packets from a live capture using a Network Monkey. Alternatively it can be used with pcap files.

Don’t forget to check out our latest contest at Hak5.org/yourlan where the most creative network will win cozy Hak5 gear from our newly opened HakShop

Download HD Download MP4 Download XviD Download WMV

Watch

Show Notes

Virtualization

So we’ve finally come to the point in which I’ve been worn down enough to begin highlighting some virtualization for you guys.

In this episode I kind of gave you a brief overview of a singular reason one would want to virtualize their infrastructure.

COST

Now more than ever I’m sure your CAPEX budgets are tightening or have vanished completely for this fiscal year.

Let’s take a real down and dirty look at the primary benefit of virtualization.

Last year I purchased a Dell server with the following specs for about $22,000

4x Quad-Core Xeon X7350 processors at 2.93GHz
128GB RAM
5x 15,000RPM 450GB SAS Hard Drives

Now as you can see this is a beast.

VMWare licensing costs for this server are about another $10,000. OUCH! However there’s more.

Right now I’m running 38 virtual machines on this server. With room for more.

Let’s say the average 1U server costs $1500. Where am I at from a pure cost perspective?

A) Virtual Environment – $32,000

B) Separate Physical machines – $57,000

This doesn’t take into account the virtual environment’s savings on things such as power consumption, or cooling.

Plus with another server, and a SAN you now have a Highly Available system for about the same cost as individual machines.

I know this was a brief overview of the primary benefits of virtualization, but I wanted to give you guys an idea of just what is accomplishable when you begin thinking virtually.

I’ll be bringing you a bunch more segments in the coming weeks ranging from SAN selection and implementation to building a cheap virtual environment at your house, so stay tuned for more!

–Matt Lestock

Contests

The Monkey Wallpaper contest is still going on. Entries are due by Friday, April 24th. The winner will be announced on next weeks episode, 511. You can find all the art work and submission details at Hak5.org/MonkeyContest. The winner will receive a deluxe sock monkey kit from SockMonkey.net!

This week we have a new contest — a code challenge. If you’re into PHP, Imagemagick, and gmail you’ll want to get involved. Entries are due by Friday, May 1st. The winner will be announced on episode 512. you can find all the details at Hak5.org/CodeChallenge. The winner will receive a copy of Mario Lurig’s PHP Book PHP Reference: Beginner to Intermediate PHP5.

Wii Homebrew News

Team Twiizers focus on BootMii

On the 16th Team Twiizers, the folks that brought us the Homebrew Channel, announced that they have shifted their focus to the BootMii project.

BootMii is system boots before the Wii System Menu and allows for complete low level control of the Wii, including launching the homebrew channel.

Team Twiizers expects to have a beta released within the coming weeks. So far it has been successfully installed on about a dozen Wiis.

We’ll have a hands on look when it becomes available.

USB Loader released

Earlier this month Waninkoko released USB Loader, an homebrew Wii app which allows you to backup game discs to USB Hard Drive or SD card run backed up games from said media without needing the original disc.

Obviously this tool has piracy potential written all over it but it’s also the fastest and most convenient option we’ve found for backing up games.

Last week we demoed nitrotux’s Wii Disc Dumper, a similar backup tool that took 10 hours to download a Dual-Layer Wii Disc in 6 parts.

The newly released USB Loader does that in 1/10th the time directly to a single ISO file. We’ll be using it today as part of our Wii 720p segment

Dolphin build 2962 released

On the 13th Dolphin build 2962 hit subversion. This latest build adds OpenAL audio support, the ability to frame dump to AVI, various bug fixes and a more powerful Xbox 360 controller rumble. Huzzah

Wii Homebrew Review

A lot has changed over the last four weeks since we started playing with Wii Homebrew so before we get into the latest — backing up Wii Games and playing them in HD on your PC — let’s review how we got here.

Currently the best method for installing Homebrew on your Wii is through a technique known as the Twilight Hack. This involves loading a special save-game for Zelda: Twilight Princess that causes a buffer overflow and code execution.

This method was thwarted by Nintendo’s recently released System Menu 4.0. If you haven’t updated your Wii already we advise you steer clear until the homebrew scene can come up with a new hack.

If you already have homebrew installed, such as the Homebrew Channel or DVD-X, updating to 4.0 doesn’t break those but we still advise against it.

The most essential homebrew app is the Homebrew Channel. It’s a breeze to install with the twilight hack and once installed you can use it to launch other homebrew apps from your SD card — no need to pull off the twilight hack every time you want to play a different homebrew app.

The Homebrew Browser is another essential as it allows you to download homebrew apps, games, utilities and demos right from your Wii’s Internet connection and onto your SD card.

A great list of homebrew apps can be found at the WiiBrew.org wiki. Details for pulling off these hacks can be found in our show notes and previous episodes.

USB SD Loader

The USB SD Loader from waninkoko is, IMHO, the easiest way to backup Wii games — far superior to the disc dumper we showed off on 509. That said, it should be known that in order to use the USB SD Loader you must modify your Wii using a wad manager — but you’ve already voided the warranty anyway right? It is also worth noting that as of writing it does not backup gamecube discs. For that you’ll need to stick to the disc dumper mentioned on 509.

In order to use the USB Loader you’ll need to install the USB Loader wad file using a wad manager. Once installed you’ll need to run the cios36 rev10 installer. Then ensure that the IOS36-64-v1024.wad file is in the root of your SD card and start the USB Loader from the new channel item in system menu.

You’ll have the option to format either an SD card or USB drive in WBFS. This will be the medium for storing and running backed up games. It’s probably not a good idea to format your regular homebrew SD card for this . I took the USB route opting to format a portable 320GB HDD. Once formatted, installing games is as simple as inserting the disc, pressing (+) on the wii remote and following the prompts. Typical single-layer discs take about an hour to copy.

In order to get the game off your removable hard drive and onto your computer in ISO form you’ll need to install the (windows only) WBFS Manager program. This program lets you select your removable drive and extract games as ISO images. You can also copy any ISOs you may have on your computer to the removable drive with this tool.

Dolphin Emulator

Once you have a legally copied ISO file on your computer you’ll want to install and configure Dolphin in order to play it.

The important bits to note about getting Dolphin to run properly is that you’ll need Microsoft Visual C++ 2008 Service Pack 1 (x86 or x64) installed. You’ll also need the DirectX March 2009 Runtime. Use the Microsoft DirectX Updater. It’s probably also a good idea to update your video drivers while you’re at it.

Dolphin itself is pretty easy to use. Like most emulators it features a plethora of control configurations and convenient save state options.

Thanks for watching, subscribing, and most of all supporting the show. Custom commissioned WiFi Pineapples running Jasager are still available.

Download HD Download MP4 Download XviD Download WMV

Watch

Show Notes

Twilight Hack

Wii Homebrew

You need a few things:

• wii
• wii mote controller
• computer
• internet access
• small sd card formatted as FAT.
• Zelda Twilight Princess for Wii

The Wii Brew Wiki
Homebrew Channel

How to install the Wii Homebrew Channel on your Wii using the Twilight Hack.

Download the Twilight Hack. There are two versions, one for Wii system 3.3, and one for 3.4. I haven’t updated mine, so I’m still on 3.3.

Download the Homebrew Channel zip file.

Also, if you want, go ahead and download some apps from the HackMii website. I suggest the Homebrew Browser so you dont have to copy apps to the SD card every time you wanna download something new.

You’ll need a small SD card 2 gig or smaller. Make sure to format your SD card as FAT. Do to this, right click on the SD card, and choose format. Simple!

Put the SD card in your Wii, then turn it on. Go to the Wii Options–>Data management–>Save Data–>Wii section of the menu. Find your Zelda: Twilight Princess saved file, and copy it. If you havent played it yet, you might not have a saved file, so go ahead and play a bit. Put your SD card in your computer and copy the “Private” folder from the card to your comp, just in case you may need it in the future.

Move the homebrew executable that you extract from the zip file to your SD card root directory and save it as boot.dol or boot.elf.

Also, save the Twilight Hack Private folder from the extracted zip file to your SD card.

Now, check out your Twilight Princess game CD. It should have some hard to read serial numbers inscribed on the inner circle. Match this serial with the corresponding “Save slot”.

RVL-RZDE-0A-0 JPN/private/wii/title/rzde/data.binTwilightHack0RVL-RZDE-0A-0 USA/private/wii/title/rzde/data.binTwilightHack0RVL-RZDE-0A-2 USA/private/wii/title/rzde/data.binTwilightHack2

Region	Inner circle text	File	Save slot
Europe/Australia	RVL-RZDP-0A-0 JPN	/private/wii/title/rzdp/data.bin	Twilight Hack
Asia (JPN)	RVL-RZDJ-0A-0 JPN	/private/wii/title/rzdj/data.bin	Twilight Hack
America (USA)
America (USA)
America (USA)

Inside the private–>wii–>title folder are 3 folders with letters corresponding to the serials. Delete the two that don’t match your cd.

Put your SD card back in the Wii. Go to Wii Options–>Data management–>Save Data–>Wii and erase the Zelda save now. Open the SD card menu and choose Twilight Hack. Copy to the Wii.

Stick your game CD in your Wii and boot up Zelda! Choose the save slot that corresponds with your serial. Mine was TwilightHack0. Go ahead and skip the intro, it doesn’t hurt the hack. Once you see Link as a playable character, either walk backwards or talk to the guy in front of you. This will start up the hack install process, so just choose “Agree” to everything.

You’re done! Now you can play on the homebrew channel. Yay!

Get the homebrew browser so you can download apps straight from the channel instead of shuffling your SD card around.

To do that, simply stick the sd in your computer and create a folder called apps. Copy the homebrew browser folder and its contents over to the sd and back it goes to your wii!

If you have some cool homebrew for the Wii, tell me about it or ask me any questions at Snubs@hak5.org.

Don’t forget to submit your questions@hak5.org and feedback@hak5.org and thanks for your contributions.

Production Note

Video issues will be resolved by 403. We’re using new equipment and didn’t catch a nasty bug in our system until after the second shoot

Watch

Show Notes

Wi-Fi Pineapple

Why target individuals on a wireless network when you could have them come to you. Darren talks about the Jasager project, a small portable honey pot with a hunger for clients based on the La Fonera router. http://www.fon.com. Download Jasager.

Maltego

Mubix heads down to show us some fun new features in the open source forensics and intelligence gathering tool Maltego. Download at http://www.paterva.com or find in the latest version of BackTrack at http://www.remote-exploit.org. Read more in Mubix’s Maltego article at room362.

Audio-Surf

Shannon reviews the IGF award winning music game by Invisible Handlebar. Audio-Surf is like the result of F-Zero and Guitar Hero hooking up with the ability to import your own music. Single, 2-player and co-op modes make this highly addictive game one of our favorites. Available through steam at www.audio-surf.com

LAN Party

We’ll be hosting our first LAN Party this season all day Saturday, September 20th at game.hak5.org. Join in for some Counter-Strike: Source action. We’ll be shooting two episodes back to back that day so feel free to hit up the setcam at http://hak5.org and watch as we fumble lines and try not to team-kill.

Plus this month’s trivia and a contest sure to get your lolz on.

Sponsors

It used to cost a fortune to protect your site with an SSL Cert. Thankfully, GoDaddy.com changed all that. You can get a standard SSL cert from Go Daddy for just $29.99 a year. They have the same basic specs you’d find on other certs – 256-bit encryption, 99% browser recognition, all that – but for about 80% less than the competition. Now you’ve got no reason to leave your data exposed. Grab an SSL cert from GoDaddy.com now for just $29.99. And save 10% on Domains and SSL certs with coupon code HAK.

Get awesome web hosting from the pros at Dreamhost and receive $25 off your order when you enter coupon code HAK5! Plans start at $7.95/mo including 500 GB storage, 5 TB bandwidth, and one-click installs of popular software like Wordpress, phpBB, and MediaWiki.

Download MP4 Download Xvid Download WMV

Sponsors

Get awesome web hosting from the pros at Dreamhost and receive $25 off your order when you enter coupon code HAK5! Plans start at $7.95/mo including 500 GB storage, 5 TB bandwidth, and one-click installs of popular software like Wordpress, phpBB, and MediaWiki.

Keep your personal information away from spammers, hackers and your crazy ex-evilserver. Private Domain Registration from GoDaddy.com protects your privacy by keeping your address, phone number and more out of the public database. Get an additional 10% on your order when you enter coupon code HAK.

Production Notes

Special thanks to Ashley Witt for the killer Hak5 Theme, and Pronobozo for the awesome bumper music and 3D animations!

Sponsors

Get awesome web hosting from the pros at Dreamhost and receive $25 off your order when you enter coupon code HAK5! Plans start at $7.95/mo including 500 GB storage, 5 TB bandwidth, and one-click installs of popular software like Wordpress, phpBB, and MediaWiki.

Keep your personal information away from spammers, hackers and your crazy ex-evilserver. Private Domain Registration from GoDaddy.com protects your privacy by keeping your address, phone number and more out of the public database. Get an additional 10% on your order when you enter coupon code HAK.