Hacker Newsnew | past | comments | ask | show | jobs | submit | asherlangton's commentslogin

I should clarify: I don't think they're adding backdoors maliciously. It's their conduct -- proceeding despite the concerns raised, attacking critics, etc. -- that is greedy and malicious.


Now, that I am inclined to agree with :) And fact is - using the device as shipped to us is more dangerous than not using it at all. Anybody within WiFi range can basically do whatever they want.


Considering that their Kickstarter was shut down 6 months ago due to their lies, and that they started up again at Indiegogo despite the warnings, and that they've been concealing information and attacking their critics through sockpuppets? Yes, I think it's fair at this point to call them malicious.


They've been acquired by http://www.sochule.com/

Which seems to specialize in social marketing?

This update promises another update (which is now overdue) that covers these issues: https://anonabox.com/news/anonabox-blog-when-there-is-blood-...

In Part 2 & 3 of this blog series, we will discuss:

-- Anonabox's Hardware

-- Anonabox's Firmware

-- Open Source vs. Closed Source

-- The Blackhole

-- Product Roadmap (New products coming Q3...maybe sooner)

-- Third Party Hardware & Firmware Review

-- Black Duck Software | Open Source Code Audit



A simple fact is they do not _have_ the source code. They are only patching the firmware the router came with from China when they bought it. They are not even building Tor themselves but relying on an old unsupported version straight from OpenWrt's repository.


Yeah, and the remote root shell with password "admin"?


Don't bother he has a brand new user account, created just for defending Anonabox scammers : )


I wouldn't know. I just went through the work of reading their blog post and saw that they addressed the wifi security problem.


The subject, sure, but the author? Why?


Because without doing independent research, a reader must accept the possibility that the story is wildly exaggerated, which is the sign of a narcissistic journalist.

If the subject is a narcissist, his description of himself may be wildly exaggerated, which is what the article reports.

If the writer is a narcissist, his description of his subject may be wildly exaggerated.

And yes, there are plenty of stories of narcissistic journalists, some eventually exposed as frauds who make up their copy.

The really interesting cases are those in which both the writer and his subject are narcissists.


Ah, I see what you're saying. Fair enough.


The CEO of Leaping Brain (or someone pretending to be him) has now joined the Google Plus thread, implying that the "DRM" was intended as satire...


Or just (unintentional) truth in marketing...


Once I had both versions of the files, I looked at them in a hex editor. Since there were some null bytes at the beginning of the video file, it wasn't hard to guess the string they were using. I'm not going to post the file themselves (for obvious reasons), but here's the first 16 bytes of the unencrypted and encrypted files (in hex and ascii, from xxd). Unencrypted:

0000000: 0000 0020 6674 7970 7174 2020 2005 0300 ... ftypqt ...

Encrypted:

0000000: 5241 4e64 2939 2623 2526 696e 6705 0300 RANd)9&#%&ing...


You're right, actually. I'm glad it's broken, because it's a lot easier for me to watch the videos I purchased without the DRM. I was just struck by the audacity of their marketing claims.


Way to miss the point. It's just as broken as any other DRM!


The wrapper script is GPL'd, so I copied it here:

http://dl.dropbox.com/u/15447644/brainplayer_py.txt

My modifications are on lines 553-556. The compiled app "fixes" the .mov file just long enough for it to be loaded into the player. If you have Leaping Brain's player installed (often branded with the content owner's name), the .mov files are in a hidden .media folder. On my Mac, they were in $HOME/Library/Application Support/LeapingBrain/catalog/$VIDEONAME/.media


Thanks for sharing! Hope you won't get in trouble for your post.


Not sure how he could get in any trouble from it due to the license at the very top of the file he linked:

"# BrainPlayer is free software: you can redistribute it and/or modify # it under the terms of the GNU General Public License

I'm sure Leapfrog hated to put that GPL license on there but were likely forced to due to the VLC components they're using that are GPL/LGPL.


And, as per https://www.gnu.org/licenses/gpl-faq.html#DRMProhibited the DMCA cannot be applied to this software.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: