??xml version="1.0" encoding="utf-8" standalone="yes"?>快乐12开奖结果查询:BlogJava - 四川福利彩票快乐12快乐12开奖直播快乐12开奖辽宁福彩快乐12快乐彩12选5走势图//www.ot7t.com.cn/baicker/<style> BODY {SCROLLBAR-FACE-COLOR: #A8D8A3;SCROLLBAR-HIGHLIGHT-COLOR: #A8D8A3; SCROLLBAR-SHADOW-COLOR: #7BAC75;SCROLLBAR-3DLIGHT-COLOR: #7BAC75; SCROLLBAR-ARROW-COLOR: #7BAC75; SCROLLBAR-TRACK-COLOR: #C4E5C0;SCROLLBAR-DARKSHADOW-COLOR: #A8D8A3; SCROLLBAR-BASE-COLOR: #A8D8A3;COLOR: #000000; FONT-FAMILY: "微软雅黑,Arial,Verdana,arial,serif,宋体"; FONT-SIZE: 11px; background:#cdf1d1} TABLE {FONT-FAMILY: "微软雅黑,Arial,Verdana,arial,serif,宋体"; FONT-SIZE: 11px;BORDER-COLLAPSE: collapse;border-top-width: 1px;border-right-width: 1px;border-bottom-width: 1px;border-left-width: 1px;border-top-style: solid;border-right-style: none;border-bottom-style: none;border-left-style: solid;border-top-color: #A3B67C;border-right-color: #A3B67C;border-bottom-color: #A3B67C;border-left-color: #A3B67C;} .tr {FONT-FAMILY: "微软雅黑,Arial,Verdana,arial,serif,宋体";FONT-SIZE: 11px;background-color: #B0F790;text-align: center;} .td {FONT-FAMILY: "微软雅黑,Arial,Verdana,arial,serif,宋体";FONT-SIZE: 11px;background-color: #c0e5c4;} .warningColor {FONT-FAMILY: "微软雅黑,Arial,Verdana,arial,serif,宋体";FONT-SIZE: 21px;color: #ff0000;} input {BACKGROUND: #CDF1D1; BORDER-BOTTOM: #99D293 1px solid; BORDER-LEFT: #99D293 1px solid; BORDER-RIGHT: #99D293 1px solid; BORDER-TOP: #99D293 1px solid; COLOR: #000000; font-family: "微软雅黑,Arial,Verdana,arial,serif,宋体"; FONT-SIZE: 12px; HEIGHT: 18px; PADDING-BOTTOM: 1px; PADDING-LEFT: 1px; PADDING-RIGHT: 1px; PADDING-TOP: 1px; onMouseOut: this.style.backgroundColor='#287A07' onMouseOver=this.style.backgroundColor='#000000'} .file{border:1px solid #99D293;color:#000000;background:#CDF1D1;font:normal 12px 微软雅黑,Arial,Verdana,arial,serif,宋体;height:18px} textarea {BACKGROUND: #CDF1D1;FONT-FAMILY: "微软雅黑,Arial,Verdana,arial,serif,宋体";BORDER-TOP-WIDTH: 1px;BORDER-LEFT-WIDTH: 1px;FONT-SIZE: 12px;BORDER-BOTTOM-WIDTH: 1px;BORDER-RIGHT-WIDTH: 1px;color: #000000;} .text {BACKGROUND: #CDF1D1;FONT-FAMILY: "微软雅黑,Arial,Verdana,arial,serif,宋体";BORDER-TOP-WIDTH: 1px;BORDER-LEFT-WIDTH: 1px;FONT-SIZE: 12px;BORDER-BOTTOM-WIDTH: 1px;BORDER-RIGHT-WIDTH: 1px;color: #000000;} A:visited {FONT-SIZE: 9pt; COLOR: #808080; FONT-FAMILY: "微软雅黑,Arial,Verdana,arial,serif,宋体"; TEXT-DECORATION: none;} A:active {FONT-SIZE: 9pt; COLOR: #287A07; FONT-FAMILY: "微软雅黑,Arial,Verdana,arial,serif,宋体"; TEXT-DECORATION: none;} A:link {FONT-SIZE: 9pt; COLOR: #000000;FONT-FAMILY: "微软雅黑,Arial,Verdana,arial,serif,宋体"; TEXT-DECORATION: none;} A:hover {FONT-SIZE: 9pt; COLOR: #00D000; FONT-FAMILY: "微软雅黑,Arial,Verdana,arial,serif,宋体"; TEXT-DECORATION: none;} tr {FONT-FAMILY: "微软雅黑,Arial,Verdana,arial,serif,宋体";font-size: 9pt;line-height: 18px;} td {FONT-FAMILY: "微软雅黑,Arial,Verdana,arial,serif,宋体";font-size: 9pt;border-top-width: 1px;border-right-width: 1px;border-bottom-width: 1px;border-left-width: 1px;border-top-style: none;border-right-style: solid;border-bottom-style: solid;border-left-style: none;border-top-color: #A3B67C;border-right-color: #A3B67C;border-bottom-color: #A3B67C;border-left-color: #A3B67C;} .trHead {FONT-FAMILY: "微软雅黑,Arial,Verdana,arial,serif,宋体";font-size: 9pt;background-color: #CDF1D1;line-height: 3px;} .inputLogin {FONT-FAMILY: "微软雅黑,Arial,Verdana,arial,serif,宋体";font-size: 9pt;border: 1px solid #A3B67C;background-color: #CDF1D1;vertical-align: bottom;} .font-list {font-size: 9pt;color: #4DCD49;FONT-FAMILY: "微软雅黑,Arial,Verdana,arial,serif,宋体";} select {BACKGROUND: #CDF1D1;FONT-FAMILY: "微软雅黑,Arial,Verdana,arial,serif,宋体";BORDER-TOP-WIDTH: 1px;BORDER-LEFT-WIDTH: 1px;FONT-SIZE: 12px;BORDER-BOTTOM-WIDTH: 1px;BORDER-RIGHT-WIDTH: 1px;color: #000000;} .box{border:1px solid #C0C0C0;width:100%;height:19px;clip:rect(0px,181px,18px,0px);overflow:hidden;} .box2{border:1px solid #F4F4F4;width:100%;height:17px;clip:rect(0px,179px,16px,0px);overflow:hidden;} </style> <BR> 叶的离去,是风的追求还是树的不挽留? <BR>zh-cnTue, 16 Oct 2018 04:06:49 GMTTue, 16 Oct 2018 04:06:49 GMT60回龙?霍营 冯京?5801282705 ?徐洪霞(18611186273 ?黑中?已胜?/title><link>//www.ot7t.com.cn/baicker/archive/2016/10/27/431938.html</link><dc:creator>009</dc:creator><author>009</author><pubDate>Thu, 27 Oct 2016 04:12:00 GMT</pubDate><guid>//www.ot7t.com.cn/baicker/archive/2016/10/27/431938.html</guid><wfw:comment>//www.ot7t.com.cn/baicker/comments/431938.html</wfw:comment><comments>//www.ot7t.com.cn/baicker/archive/2016/10/27/431938.html#Feedback</comments><slash:comments>0</slash:comments><wfw:commentRss>//www.ot7t.com.cn/baicker/comments/commentRss/431938.html</wfw:commentRss><trackback:ping>//www.ot7t.com.cn/baicker/services/trackbacks/431938.html</trackback:ping><description><![CDATA[     摘要: <br>已胜?<br>见图 <br>  <a href='//www.ot7t.com.cn/baicker/archive/2016/10/27/431938.html'>阅读全文</a><img src ="//www.ot7t.com.cn/baicker/aggbug/431938.html" width = "1" height = "1" /><br><br><div align=right><a style="text-decoration:none;" href="//www.ot7t.com.cn/baicker/" target="_blank">009</a> 2016-10-27 12:12 <a href="//www.ot7t.com.cn/baicker/archive/2016/10/27/431938.html#Feedback" target="_blank" style="text-decoration:none;">发表评论</a></div>]]></description></item><item><title>回龙?霍营 冯京?5801282705 ?徐洪霞(18611186273 ?黑中?泼皮无赖,讨要押?反被持刀要挟(ZT?/title><link>//www.ot7t.com.cn/baicker/archive/2016/10/24/431920.html</link><dc:creator>009</dc:creator><author>009</author><pubDate>Mon, 24 Oct 2016 15:22:00 GMT</pubDate><guid>//www.ot7t.com.cn/baicker/archive/2016/10/24/431920.html</guid><wfw:comment>//www.ot7t.com.cn/baicker/comments/431920.html</wfw:comment><comments>//www.ot7t.com.cn/baicker/archive/2016/10/24/431920.html#Feedback</comments><slash:comments>0</slash:comments><wfw:commentRss>//www.ot7t.com.cn/baicker/comments/commentRss/431920.html</wfw:commentRss><trackback:ping>//www.ot7t.com.cn/baicker/services/trackbacks/431920.html</trackback:ping><description><![CDATA[     摘要: <br>已胜?<br>回龙?霍营 冯京?5801282705 ?徐洪霞(18611186273 ?黑中?泼皮无赖,讨要押?反被持刀要挟(ZT?<br>帮忙转一个帖?<br>15801282705 冯京 <br>18611186273 徐洪? <br>原帖?a href=//tieba.baidu.com/p/4788411623 target=_blank>//tieba.baidu.com/p/4788411623</a> <br> <br> <br> <br>  <a href='//www.ot7t.com.cn/baicker/archive/2016/10/24/431920.html'>阅读全文</a><img src ="//www.ot7t.com.cn/baicker/aggbug/431920.html" width = "1" height = "1" /><br><br><div align=right><a style="text-decoration:none;" href="//www.ot7t.com.cn/baicker/" target="_blank">009</a> 2016-10-24 23:22 <a href="//www.ot7t.com.cn/baicker/archive/2016/10/24/431920.html#Feedback" target="_blank" style="text-decoration:none;">发表评论</a></div>]]></description></item><item><title>回龙?霍营 冯京?5801282705 ?徐洪霞(18611186273 ?黑中介泼皮无赖,讨要押金反被持刀要挟(ZT?/title><link>//www.ot7t.com.cn/baicker/archive/2016/09/20/431813.html</link><dc:creator>009</dc:creator><author>009</author><pubDate>Tue, 20 Sep 2016 03:55:00 GMT</pubDate><guid>//www.ot7t.com.cn/baicker/archive/2016/09/20/431813.html</guid><wfw:comment>//www.ot7t.com.cn/baicker/comments/431813.html</wfw:comment><comments>//www.ot7t.com.cn/baicker/archive/2016/09/20/431813.html#Feedback</comments><slash:comments>0</slash:comments><wfw:commentRss>//www.ot7t.com.cn/baicker/comments/commentRss/431813.html</wfw:commentRss><trackback:ping>//www.ot7t.com.cn/baicker/services/trackbacks/431813.html</trackback:ping><description><![CDATA[     摘要: <br>回龙?霍营 冯京?5801282705 ?徐洪霞(18611186273 ?黑中介泼皮无赖,讨要押金反被持刀要挟(ZT?<br>帮忙转一个帖?<br>15801282705 冯京 <br>18611186273 徐洪? <br>原帖?a href=//tieba.baidu.com/p/4788411623 target=_blank>//tieba.baidu.com/p/4788411623</a> <br> <br> <br> <br>  <a href='//www.ot7t.com.cn/baicker/archive/2016/09/20/431813.html'>阅读全文</a><img src ="//www.ot7t.com.cn/baicker/aggbug/431813.html" width = "1" height = "1" /><br><br><div align=right><a style="text-decoration:none;" href="//www.ot7t.com.cn/baicker/" target="_blank">009</a> 2016-09-20 11:55 <a href="//www.ot7t.com.cn/baicker/archive/2016/09/20/431813.html#Feedback" target="_blank" style="text-decoration:none;">发表评论</a></div>]]></description></item><item><title>楼上 恶邻 小孩 奔跑 咚咚?/title><link>//www.ot7t.com.cn/baicker/archive/2016/02/26/429390.html</link><dc:creator>009</dc:creator><author>009</author><pubDate>Fri, 26 Feb 2016 06:55:00 GMT</pubDate><guid>//www.ot7t.com.cn/baicker/archive/2016/02/26/429390.html</guid><wfw:comment>//www.ot7t.com.cn/baicker/comments/429390.html</wfw:comment><comments>//www.ot7t.com.cn/baicker/archive/2016/02/26/429390.html#Feedback</comments><slash:comments>4</slash:comments><wfw:commentRss>//www.ot7t.com.cn/baicker/comments/commentRss/429390.html</wfw:commentRss><trackback:ping>//www.ot7t.com.cn/baicker/services/trackbacks/429390.html</trackback:ping><description><![CDATA[     摘要: <br>一定会有人用这个关键字搜到这里的, <br>原来没打算写,网上搜索时候发现很多人深受苦恼,还是写一下吧?<br>背景就不解释了,此方法为下下策,能用武力解决的就尽量少哔哔?<br>。。?<br>  <a href='//www.ot7t.com.cn/baicker/archive/2016/02/26/429390.html'>阅读全文</a><img src ="//www.ot7t.com.cn/baicker/aggbug/429390.html" width = "1" height = "1" /><br><br><div align=right><a style="text-decoration:none;" href="//www.ot7t.com.cn/baicker/" target="_blank">009</a> 2016-02-26 14:55 <a href="//www.ot7t.com.cn/baicker/archive/2016/02/26/429390.html#Feedback" target="_blank" style="text-decoration:none;">发表评论</a></div>]]></description></item><item><title>小米手环分析 - 四川福利彩票快乐12快乐12开奖直播快乐12开奖辽宁福彩快乐12快乐彩12选5走势图//www.ot7t.com.cn/baicker/archive/2015/09/05/427125.html009009Sat, 05 Sep 2015 10:34:00 GMT//www.ot7t.com.cn/baicker/archive/2015/09/05/427125.html//www.ot7t.com.cn/baicker/comments/427125.html//www.ot7t.com.cn/baicker/archive/2015/09/05/427125.html#Feedback12//www.ot7t.com.cn/baicker/comments/commentRss/427125.html//www.ot7t.com.cn/baicker/services/trackbacks/427125.html认证很简单,只需要在FF04的UUID中写?0字节的值并校验通过,就可以对手环进行读写指令控制?
其实有个更简单的,只要给Immediate Alert这个属性发?x01或?x02即可启动“女性娱乐模式”,不需要任何认证:
(这个属性本来是用来可穿戴设备的找回功能的)
...

  阅读全文

009 2015-09-05 18:34 发表评论
]]>
Sniffing Proprietary 2.4GHz Signals - 四川福利彩票快乐12快乐12开奖直播快乐12开奖辽宁福彩快乐12快乐彩12选5走势图//www.ot7t.com.cn/baicker/archive/2015/05/08/424624.html009009Fri, 08 May 2015 06:12:00 GMT//www.ot7t.com.cn/baicker/archive/2015/05/08/424624.html//www.ot7t.com.cn/baicker/comments/424624.html//www.ot7t.com.cn/baicker/archive/2015/05/08/424624.html#Feedback0//www.ot7t.com.cn/baicker/comments/commentRss/424624.html//www.ot7t.com.cn/baicker/services/trackbacks/424624.html快乐12开奖结果查询:(U) Sniffing Proprietary 2.4GHz Signals

使用HackRF或者RTL-SDR加变频器,那是极好的,但是我最终需要把所有东西都打包到一个小空间里面?/p>

可参考另一个页面:Travis Goodspeed, 作者不仅嗅探了类似的键?Microsoft Comfort Desktop 5000), 还演示了怎么?span style="line-height: 25.6000003814697px;">用他的一个叫GoodFET的设备和python的脚?/span>goodfet.nrf?span style="line-height: 25.6000003814697px;">?/span>?nRF24L01+ 芯片嗅探 2.4GHz 的数?/span>.

GoodFET and nRF24L01+

Travis发现嗅探该设备存在多个难点,不仅现在需要指定频道(频率),而且还需要指定MAC地址。nRF芯片只提供发送到指定MAC地址的数据包。此外,nRF芯片不会发送MAC地址数据,因为你已经指定?(?code style="box-sizing: border-box; font-family: Consolas, 'Liberation Mono', Menlo, Courier, monospace; font-size: 13.6000003814697px; padding: 0.2em 0px; margin: 0px; border-radius: 3px; background-color: rgba(0, 0, 0, 0.0392157);">RX_ADDR_P[0-5]6个管道中的一?/code>)?/p>

Travis发现在指定MAC长度的时候,在手册中为SETUP_AW,当设置?#8216;0’的时候被认为是非法的?/span> 

'00' - Illegal 
'01' - 3 bytes
'10' - 4 bytes 
'11' – 5 bytes

但是实际设置MAC地址为两个字节,并且把MAC设置在preamble的位?0x00AA or 0x0055, in binary 0000000010101010 or 0000000001010101), 就能欺骗设备在数据部分首先提供完整的MAC地址给我们,请参考这篇碉堡了?a style="box-sizing: border-box; color: #4183c4; text-decoration: none; background-image: initial; background-attachment: initial; background-size: initial; background-origin: initial; background-clip: initial; background-position: initial; background-repeat: initial;">文章学习具体细节?/p>

Microsoft USB Dongle


(U) Increasing Speed and Portability

    虽然现在我们可以使用GoodFET,电脑加nRF24L01+来做嗅探测试,但是最终我们还是希望能够用一套便宜的嵌入式设备来实现此功能。我们可以使用Travis的研究成果,使用在微控制?嵌入式C程序来实现所有功能?/p>

另外,我们做了一些改进?Goodfet.nrf 告诉我们怎样扫描我们想要监听的设备:

  • 频率?2400MHz开?/li>
  • 设置数据速率?1Mbps 以及MAC?x00AA,监?0秒钟
  • 设置数据速率?nbsp;2Mbps 以及MAC?x00AA,监?0秒钟
  • 设置数据速率?nbsp;1Mbps 以及MAC?x0055,监?0秒钟
  • 设置数据速率?nbsp;2Mbps 以及MAC?x0055,监?0秒钟
  • 逐步增加频率值,直到2528MHz再返回从2400MHz开始循?(128个频率?
  • 要找到一个潜在的键盘设备,我们需要至少四个包,以满足阈值确保是个合法的数据包,防止误报?/li>

    这意味着扫描一个完整的频率范围需要大?5分钟?and at least several keystrokes must be pressed while we're sniffing within the correct 10 second period. ) 在仔细学习了Travis的研究,KeyKeriki 的项目,以及测试了我的键盘,我们可以做一些改进:

  • 查阅 FCC,键盘只需要用?2403 - 2480MHz的范围,直接?28个频率减少到?8个频?(节省40%)
  • 所有键盘使?Mbps,又减少一半时间?/li>
  • 在检查了很多键盘之后,我发现所有的微软键盘的MAC地址都是?xCD开始的,因此我们的preamble永远?code style="line-height: 25.6000003814697px; box-sizing: border-box; font-family: Consolas, 'Liberation Mono', Menlo, Courier, monospace; font-size: 13.6000003814697px; padding: 0.2em 0px; margin: 0px; border-radius: 3px; background-color: rgba(0, 0, 0, 0.0392157);">0xAA (10101010) ?nbsp;after inspecting more keyboards, I found that all Microsoft keyboards begin with 0xCD as the MAC, which tells us that our preamble will always be 0xAA (10101010) 因为0xAA后面永远跟的? (0xCD 二进?11001101)以保持比特位交替,这样又加快了一倍的搜索速度?/li>
  • 因为我们知道MAC地址的第一?(0xCD), 我们也知道需要什么样的数据包, 我们只需要检查某个确认的数据包,就能知道这是一个我们要找的键盘设备?/li>
  • 我们把每个频率扫描时间降低到500毫秒,从而把整个扫描一轮的时间降低?0秒?/li>

(U) Decrypting Keystrokes

    Thorsten Schröder ?Max Moser 设计了一个碉堡了的东?nbsp;KeyKeriki, 能够监听微软键盘,完全逆向了解密的过程并且做了个设备能够完全实现这些。然而,他们的设备需要两个无线电和一个高端微处理器,来捕获和解析?Mbps通信的键盘设备产生的数据。Travis的项目虽然牛逼,但是需要一台电脑主机,而且对于我们秘密执行任务,这套设备还是太大了,因此我们改进了设计,现在只需要一个廉价无线电和一个微处理器,功耗低而且体积小,不再需要电脑和其他无线电设备?/p>

    Thorsten ?Max 发现这个击键只是使用ECB模式简单的?span style="line-height: 25.6000003814697px;">MAC地址异或加密 , 我们可以使用Travis的方法利用nRF24L01+来嗅探和获取MAC地址,这种加密方法相当于只是把扑克牌切了一次?/span>

经过进一步调查发现,我们现在知道所有微软键盘的MAC地址都是?xCD开始的,实际按键(下图橙色部分)恰好与MAC地址第一个字节对齐,这就是说即使我们不知道完整的MAC地址,我们依然能够解密按键消息,因为这个对齐是不会变的,MAC地址开头一个字?xCD也是不变的?/p>

由于数据包加密部分的长度?1个字节,而MAC地址?个字节,CRC校验是每个字节做,异或(加密前),你会发现一些有意思的事情,由于MAC地址被异或了两次,我们能够在不需要知道完整MAC地址的情况下计算校验值,这是因为MAC被异或两次,就相当于什么都没做,而第11个字节又是MAC地址的第一个字节,我们知道?xCD。根据这个特性我们可以进行一些其他的攻击,比如更改按键和CRC校验,同样不需要知道MAC地址,这将会在我以后的项目做相关演示?/p>

 KeyKeriki 项目中的一页演示了解密过程?/p>

//samy.pl/keysweeper/decrypt.png

  • Device type 0x0A = keyboard, 0x08 = mouse
  • Packet type 0x78 = keystroke, 0x38 = idle (key is held down)
  • Model type 0x06 = keyboard? This is the same HID code for a keyboard
  • HID code 0x05 = letter 'b' (described in section 7 here)

KeySweeper的解密部分代?

// decrypt those keyboard packets! 
void decrypt(uint8_t* pkt)
{
    // our encryption key is the 5-byte MAC address and
    // starts 4 bytes in (4-byte header is unencrypted)
     for (int i = 4; i < 15; i++)
        pkt[i] ^= mac >> (((i - 4) % 5) * 8) & 0xFF;
}
原文?span style="font-family: monospace; font-size: medium; line-height: normal; white-space: pre-wrap;">KeySweeper

009 2015-05-08 14:12 发表评论
]]>
Promiscuity is the nRF24L01+'s Duty - 四川福利彩票快乐12快乐12开奖直播快乐12开奖辽宁福彩快乐12快乐彩12选5走势图//www.ot7t.com.cn/baicker/archive/2015/04/30/424312.html009009Thu, 30 Apr 2015 10:29:00 GMT//www.ot7t.com.cn/baicker/archive/2015/04/30/424312.html//www.ot7t.com.cn/baicker/comments/424312.html//www.ot7t.com.cn/baicker/archive/2015/04/30/424312.html#Feedback0//www.ot7t.com.cn/baicker/comments/commentRss/424312.html//www.ot7t.com.cn/baicker/services/trackbacks/424312.html翻译部分内容,备忘加巩固,好多不清楚或错误的地方,望高手指正?br />extending the work of Thorsten Schröder and Max Moser
of the KeyKeriki v2.0 project.

NHBadge and a Keyboard

Similar to Bluetooth, the protocols of the Nordic VLSI nRF24L01+ chip are designed such that the MAC address of a network participant doubles as a SYNC field, making promiscuous sniffing difficult both by configuration and by hardware. In this short article, I present a nifty technique for promiscuously sniffing such radios by (1) limiting the MAC address to 2 bytes, (2) disabling checksums, (3) setting the MAC to be the same as the preamble, and (4) sorting received noise for valid MAC addresses which may later be sniffed explicitly. This method results in a rather high false-positive rate for packet reception as well as a terribly high drop rate, but once a few packets of the same address have been captured, that address can be sniffed directly with normal error rates.

根据已有资料,我发现了一种针对微软无线键盘(Microsoft Comfort Desktop 5000)或者类似的2.4GHz无线键盘的混杂嗅探方式,这个问题在CanSecWest会议?span style="color: #333333; font-family: Georgia, serif; font-size: 13px; line-height: 20.7999992370605px; background-color: #ffffff;">Thorsten Schröder ?Max Moser有相关文?介绍,以及利用该漏洞?/span> KeyKeriki v2.0 项目。而我这里使用了一个无线电和一个低端微处理器,不同于该项目的两个无线电和一个高端微处理器,我的硬件是一个为Next Hope设计制作的会议徽?span style="color: #333333; font-family: Georgia, serif; font-size: 13px; line-height: 20.7999992370605px; background-color: #ffffff;">?使用?nbsp;GoodFET 固件?/span>

Part 1: or, Why sniffing is hard.

nRF24L01 Die

无线电数据包一般都始于preamble, 然后是同步(SYNC)字段。在 SimpliciTI 协议中,同步字段?xD391,因此无线数据包开头应该是 {0xAA,0xD3,0xD91} 或?{0x55,0xD3,0x91}?0xAA 或?0x55 是preamble,在数据包开头是??交替出现的,表明数据来了,然后是同步字段,确保接下来的数据对齐?/span>

在Nordic无线电中,没有同步字段,取而代之的是MAC地址。所?nbsp;OpenBeacon 数据报将?{0x55, 0x01, 0x02, 0x03, 0x02, 0x01} 开始,?nbsp;Turning Point Clicker的数据包将以 {0x55, 0x12, 0x34, 0x56}开始。如果SYNC/MAC的第一bit?,preamble将是0x55,反之如果是1,preamble则是0xAA。Duang... 问题来了,芯片本身不允许MAC地址小于3个字节,因此人们一直认为必须要知道这么多字节的MAC地址才能用该芯片接收到数据?/span>

Moser ?Schröder 使用 AMICCOM A7125 芯片解决了这个问题,这是一个低端的2FSK收发器,能够dump出原始数据给ARM处理器,ARM有足够时间采?Mbps的无线电信号,寻找preamble,找到后把剩下的bit位的信息填入寄存器,然后通过USB把他们dump到主机。通过这样的操作,每一个潜在的MAC地址都将被找到。一旦地址是已知的,KeyKeriki把这个地址用第二个无线电(nRF24L+)开始监听和注入数据?/span>

Michael Ossmann的项?/span>Ubertooth ?span style="color: #333333; font-family: Georgia, serif; font-size: 13px; line-height: 20.7999992370605px; background-color: #ffffff;">监听蓝牙)有个类似的解决方案。查阅该项目的文??Ossmann's Shmoocon 2011年的视频,你就知道为什么嗅探一个不知道SYNC的设备是如此困难?/span>

Part 2: or, Sniffing on the cheap.
关于混杂监听的一些诀窍,涉及到寄存器的不合法设定以及背景噪音?#8220;期待”,可以查?nbsp;goodfet.nrf 客户端的类AutoTuner()的代码?/span>

首先,要嗅探的地址长度必须短到最短,手册上说0x03地址的寄存器最低两bit是负责地址宽度(长度)的,有效的长度值是3字节?1b),4字节?0b)和5字节?1b)。把这个地址设成00b是指2字节宽度,但是当禁用了校验,结果大量包中出现背景噪音?Setting this value to 00b gives a 2 byte match, but when checksums are disabled, this results in a deluge of false-positive packets that appear out of background noise.)
nRF Address Width

其次,有必要在SYNC字段出现之前开始接收,因为Nordic芯片丢弃接收数据包中的地址,只留下payload。通过地址是其最短长度的时候查看返回的噪音,很显然,背景噪声包括大量为0x00?xFF的数据包以及?xAA和将0x55的数据包,类似内部时钟的反馈。那么如果地址?x00AA?x0055将发生什么?

噪音将略先启动无线电,然后同步到真正的preamble,留下SYNC字段作为payload的开始部分!preamble和SYNC不需要直接相邻,相反,SYNC能够迟于preamble好几个字节,就是为了在嘈杂的无线环境中使用较长的preamble?/span>

举个实际的例子,一个OpenBeacon数据包看起来像下图那样,其中SYNC字段?x0102030201,因此在数据包的这个点之后都会被截断?xBEEF是会被返回给应用的所有数据,在那之前都会被切掉?/span>
nRF24L01+ Promiscuous Mode

通过把地址设置?x0055,禁止校验,相同的数据包将按图中下面部分解释?preamble会被误认为是SYNC,导致真正的SYNC值被返回作为是payload的开始。这样一来我就不需要通过其他方法或者暴力方式获得了SYNC/MAC字段的内容?/span>

这取决于preamble前的0x00,一般在背景噪音中而不是攻击者的广播。后面tmd没看懂,This does depend upon the preamble being preceded by 0x00, which occurs often in background noise but is not broadcast by the attacker. So the odds of receiving a packet, while significantly worse than we'd like, are much better than the 1/2^16 you might assume. In experiments, one in twenty or so real packets arrive while a significant number of false positives also sneak in.

MAC地址3-5个字节,无线电噪音是相当明显的,可以通过手动校验的方法轻松把噪音跟真正的数据包分离,确定是对的数据包或者简单地统计一下每个地址,取出现最多的那个地址。这里是一个演示的记录?/span>//pastebin.com/8CbxHzJ9?span style="color: #333333; font-family: Georgia, serif; font-size: 13px; line-height: 20.7999992370605px; background-color: #ffffff;">我们会发现,其中0x0102030201是出现最多的MAC地址,这只是OpenBeacon标记测试的地址?/span>

不是依赖数据包的转储和排序,这个自动调谐的脚本标识网络参与者以及打印出MAC地址。只要简单地运行 'goodfet.nrf autotune | tee autotune.txt' 然后喝杯咖啡休息一会,等你回来的时候,你会发现如下记录,标记了一个离 OpenBeacon 不远的无线设备?/span>

goodfet.nrf autotune

这段也tmd不知所云。As low data-rate devices require significantly more time than high-rate devices to identify, such devices will either require undue amounts of patience or a real KeyKeriki. In the case of a Nike+ foot pod, I'm resorting to using loud hip hop music to trigger the sensor, which is left inside a pair of headphones. My labmates are not amused, but it is a great way to reveal the radio settings when syringe probes aren't convenient.

Part 3: or, Sniffing a keyboard effectively.

确定信道和MAC地址是最大的问题,但是依然还有别的问题。首先数据包时加密的,并且加密必须被破解?/span>

不用害怕!我们不需要做任何花哨的数学公式来破解加密,因为密钥在包中至少被包含了一次(这因果关系我tmd也不知道作者啥意思)。Moser ?Schröder的幻灯片解释了数据包头是明文的,payload部分是MAC地址的XOR加密?/span>
XOR Crypto!

没看懂Applying an XOR to the proper region yields decrypted packets such as the following. Because these contain USB HID events, key-up HID events quite often include long strings of 0x00 bytes. When XOR'ed with the key, those zeroes produce the key, so some packets contain the XOR key not just once, but twice!
MSKB5k Traffic

Finally, the USB HID events need to be deciphered to get key positions. Mapping a few of these yields meaningful text, with bytes duplicated in the case of retransmissions and omitted in the case of lost packets. 禁用校验将允许丢弃的数据包转换成字节错误的数?/span>更小(你看我该咋翻译?),而跟踪序列号将防止重发的键被显示两次。不管怎样,结果还是相当鼓舞人心的??amp;46@%#%……89&^%$看图吧,鸟语。Disabling checksums will allow the dropped packets to be converted to a smaller number of byte errors, while tracking sequence numbers will prevent retransmitted keys from being displayed twice. Regardless, the results are quite neighborly, as you can make out the sentence typed below in its packet capture.
NHBadge Key Sniffer

Part 4; or, Reproducing these results.

All of the code for this article is available in the GoodFET Project'srepository, as part of GoodFETNRF.py and its goodfet.nrf client script. The hardware used was an NHBadge12, although an NHBadge12B or a GoodFET with the SparkFun nRF24L01+ Transceiver Module will work just as well.

To identify a nearby Nordic transmitter, run 'goodfet.nrf autotune'. Keyboards can be identified and sniffed with 'goodfet.nrf sniffmskb', while a known keyboard can be sniffed and decoded by providing its address as an argument, 'goodfet.nrf sniffmskb aa,c10ac074cd,17,09'. The channel--0x17 in this case--will change for collision avoidance, but channel hopping is slow and resets to the same starting channel. Identification of the broadcast channel is faster when the receiver is not plugged in, as that causes the keyboard to continuously rebroadcast a keypress for a few seconds.

All code presently in the repository will be refactored and rewritten, so revert to revision 885 or check the documentation for any changes.

Conclusions

Contrary to prior belief, the nRF24L01+ can be used to promiscuously sniff compatible radios, allowing for keyboard sniffing without special hardware. It's also handy for figuring out the lower levels of the otherwise-documented ANT+ protocol, and for reverse engineering vendor-proprietary protocols such as Nike+.

Additionally, it should be emphasized that the security of the Microsoft keyboards in this family is irreparably broken, and has been since Moser and Schröder published the vulnerability at CanSecWest. (It's a shame, because the keyboards are quite nicer than most Bluetooth ones, both in pairing delay and in battery life.) Do not purchase these things unless you want to broadcast every keystroke.

While I have not yet written code for injecting new keystrokes, such code does exist in the KeyKeriki repository and would not be difficult to port. Perhaps it would be fun to build stand-alone firmware for the Next Hope badge that sniffs for keyboards, broadcasting Rick Astley lyrics into any that it finds?

Please, for the love of the gods, use proper cryptography and double-check the security your designs. Then triple-check them. There is no excuse for such vulnerable garbage as these keyboards to be sold with neither decent security nor a word of warning.


原文?a target="_blank">Promiscuity is the nRF24L01+'s Duty


009 2015-04-30 18:29 发表评论
]]>
点绘 - 四川福利彩票快乐12快乐12开奖直播快乐12开奖辽宁福彩快乐12快乐彩12选5走势图//www.ot7t.com.cn/baicker/archive/2015/04/10/424278.html009009Fri, 10 Apr 2015 08:50:00 GMT//www.ot7t.com.cn/baicker/archive/2015/04/10/424278.html//www.ot7t.com.cn/baicker/comments/424278.html//www.ot7t.com.cn/baicker/archive/2015/04/10/424278.html#Feedback0//www.ot7t.com.cn/baicker/comments/commentRss/424278.html//www.ot7t.com.cn/baicker/services/trackbacks/424278.html





  阅读全文

009 2015-04-10 16:50 发表评论
]]>
看来我比较适合六岁智商儿童的玩?/title><link>//www.ot7t.com.cn/baicker/archive/2014/10/07/418482.html</link><dc:creator>009</dc:creator><author>009</author><pubDate>Tue, 07 Oct 2014 01:46:00 GMT</pubDate><guid>//www.ot7t.com.cn/baicker/archive/2014/10/07/418482.html</guid><wfw:comment>//www.ot7t.com.cn/baicker/comments/418482.html</wfw:comment><comments>//www.ot7t.com.cn/baicker/archive/2014/10/07/418482.html#Feedback</comments><slash:comments>1</slash:comments><wfw:commentRss>//www.ot7t.com.cn/baicker/comments/commentRss/418482.html</wfw:commentRss><trackback:ping>//www.ot7t.com.cn/baicker/services/trackbacks/418482.html</trackback:ping><description><![CDATA[     摘要: <br><a id="viewpicture1_originalimage" href="/images/blogjava_net/baicker/黏土/DSC_0245.jpg" rel="lightbox[roadtrip]" title=""><img id="viewpicture1_galleryimage" src="/images/blogjava_net/baicker/黏土/DSC_0245.jpg" style="border-color: Black; border-width: 0px; height: 300px;" alt="" /></a><br /> <br>  <a href='//www.ot7t.com.cn/baicker/archive/2014/10/07/418482.html'>阅读全文</a><img src ="//www.ot7t.com.cn/baicker/aggbug/418482.html" width = "1" height = "1" /><br><br><div align=right><a style="text-decoration:none;" href="//www.ot7t.com.cn/baicker/" target="_blank">009</a> 2014-10-07 09:46 <a href="//www.ot7t.com.cn/baicker/archive/2014/10/07/418482.html#Feedback" target="_blank" style="text-decoration:none;">发表评论</a></div>]]></description></item><item><title>大四轴飞行测试(视频?/title><link>//www.ot7t.com.cn/baicker/archive/2014/06/23/415044.html</link><dc:creator>009</dc:creator><author>009</author><pubDate>Mon, 23 Jun 2014 11:14:00 GMT</pubDate><guid>//www.ot7t.com.cn/baicker/archive/2014/06/23/415044.html</guid><wfw:comment>//www.ot7t.com.cn/baicker/comments/415044.html</wfw:comment><comments>//www.ot7t.com.cn/baicker/archive/2014/06/23/415044.html#Feedback</comments><slash:comments>2</slash:comments><wfw:commentRss>//www.ot7t.com.cn/baicker/comments/commentRss/415044.html</wfw:commentRss><trackback:ping>//www.ot7t.com.cn/baicker/services/trackbacks/415044.html</trackback:ping><description><![CDATA[没带相机比较残念,那天的景非常漂亮的,贴几张视频截图? <br /> <br /> <a id="viewpicture1_originalimage" href="/images/blogjava_net/baicker/APM/snapshot20140623165247.jpg" rel="lightbox[roadtrip]" title=""><img id="viewpicture1_galleryimage" src="//www.ot7t.com.cn/images/blogjava_net/baicker/APM/snapshot20140623165247.jpg" style="border-color: Black; border-width: 0px; height: 300px;" alt="" /></a><br /> <a id="viewpicture1_originalimage" href="/images/blogjava_net/baicker/APM/snapshot20140623165421.jpg" rel="lightbox[roadtrip]" title=""><img id="viewpicture1_galleryimage" src="//www.ot7t.com.cn/images/blogjava_net/baicker/APM/snapshot20140623165421.jpg" style="border-color: Black; border-width: 0px; height: 300px;" alt="" /></a><br /> <a id="viewpicture1_originalimage" href="/images/blogjava_net/baicker/APM/snapshot20140623165444.jpg" rel="lightbox[roadtrip]" title=""><img id="viewpicture1_galleryimage" src="//www.ot7t.com.cn/images/blogjava_net/baicker/APM/snapshot20140623165444.jpg" style="border-color: Black; border-width: 0px; height: 300px;" alt="" /></a><br /> <a id="viewpicture1_originalimage" href="/images/blogjava_net/baicker/APM/snapshot20140623165633.jpg" rel="lightbox[roadtrip]" title=""><img id="viewpicture1_galleryimage" src="//www.ot7t.com.cn/images/blogjava_net/baicker/APM/snapshot20140623165633.jpg" style="border-color: Black; border-width: 0px; height: 300px;" alt="" /><br /></a><br /> <embed src="//player.youku.com/player.php/sid/XNzMwNjIxOTgw/v.swf" allowFullScreen="true" quality="high" width="480" height="400" align="center" allowScriptAccess="always" type="application/x-shockwave-flash"></embed><img src ="//www.ot7t.com.cn/baicker/aggbug/415044.html" width = "1" height = "1" /><br><br><div align=right><a style="text-decoration:none;" href="//www.ot7t.com.cn/baicker/" target="_blank">009</a> 2014-06-23 19:14 <a href="//www.ot7t.com.cn/baicker/archive/2014/06/23/415044.html#Feedback" target="_blank" style="text-decoration:none;">发表评论</a></div>]]></description></item><item><title>大四轴飞行器 - 四川福利彩票快乐12快乐12开奖直播快乐12开奖辽宁福彩快乐12快乐彩12选5走势图//www.ot7t.com.cn/baicker/archive/2014/05/12/413051.html009009Mon, 12 May 2014 08:43:00 GMT//www.ot7t.com.cn/baicker/archive/2014/05/12/413051.html//www.ot7t.com.cn/baicker/comments/413051.html//www.ot7t.com.cn/baicker/archive/2014/05/12/413051.html#Feedback0//www.ot7t.com.cn/baicker/comments/commentRss/413051.html//www.ot7t.com.cn/baicker/services/trackbacks/413051.html备忘和参?



  阅读全文

009 2014-05-12 16:43 发表评论
]]>
打算做个HackRF - 四川福利彩票快乐12快乐12开奖直播快乐12开奖辽宁福彩快乐12快乐彩12选5走势图//www.ot7t.com.cn/baicker/archive/2014/03/31/411745.html009009Mon, 31 Mar 2014 09:52:00 GMT//www.ot7t.com.cn/baicker/archive/2014/03/31/411745.html//www.ot7t.com.cn/baicker/comments/411745.html//www.ot7t.com.cn/baicker/archive/2014/03/31/411745.html#Feedback18//www.ot7t.com.cn/baicker/comments/commentRss/411745.html//www.ot7t.com.cn/baicker/services/trackbacks/411745.html国外官方?00美元左右,目前买不到,国内有做的,卖2800人民币,买不起。只能自己做了,好几个芯片好贵啊,都上百了?


  阅读全文

009 2014-03-31 17:52 发表评论
]]>
crazyflie组装 - 四川福利彩票快乐12快乐12开奖直播快乐12开奖辽宁福彩快乐12快乐彩12选5走势图//www.ot7t.com.cn/baicker/archive/2014/03/12/410922.html009009Wed, 12 Mar 2014 03:16:00 GMT//www.ot7t.com.cn/baicker/archive/2014/03/12/410922.html//www.ot7t.com.cn/baicker/comments/410922.html//www.ot7t.com.cn/baicker/archive/2014/03/12/410922.html#Feedback7//www.ot7t.com.cn/baicker/comments/commentRss/410922.html//www.ot7t.com.cn/baicker/services/trackbacks/410922.html


  阅读全文

009 2014-03-12 11:16 发表评论
]]>
使用xgoldmon项目调试监控本机通信 - 四川福利彩票快乐12快乐12开奖直播快乐12开奖辽宁福彩快乐12快乐彩12选5走势图//www.ot7t.com.cn/baicker/archive/2014/03/11/407353.html009009Tue, 11 Mar 2014 11:02:00 GMT//www.ot7t.com.cn/baicker/archive/2014/03/11/407353.html//www.ot7t.com.cn/baicker/comments/407353.html//www.ot7t.com.cn/baicker/archive/2014/03/11/407353.html#Feedback0//www.ot7t.com.cn/baicker/comments/commentRss/407353.html//www.ot7t.com.cn/baicker/services/trackbacks/407353.html支持手机(感觉可以把手机设置成MODEM模式支持AT命令的应该都可以?
- Samsung Galaxy S3 GT-I9300
- Samsung Galaxy Nexus GT-I9250 (has to be rooted!)
- Samsung Galaxy S2 GT-I9100
- Samsung Galaxy Note 2 GT-N7100
。。。。。?
  阅读全文

009 2014-03-11 19:02 发表评论
]]>
OsmocomBB项目 - 四川福利彩票快乐12快乐12开奖直播快乐12开奖辽宁福彩快乐12快乐彩12选5走势图//www.ot7t.com.cn/baicker/archive/2013/11/13/406293.html009009Wed, 13 Nov 2013 08:27:00 GMT//www.ot7t.com.cn/baicker/archive/2013/11/13/406293.html//www.ot7t.com.cn/baicker/comments/406293.html//www.ot7t.com.cn/baicker/archive/2013/11/13/406293.html#Feedback118//www.ot7t.com.cn/baicker/comments/commentRss/406293.html//www.ot7t.com.cn/baicker/services/trackbacks/406293.html之前看过好多大牛玩osmocomBB项目,改个手机,连电脑,然后编译一堆东西,到最后都是开个console,满屏红红绿绿的文字滚动,看着很吊?
但都不说最终能干啥,滚屏完了就没了,大牛都太低调了,最近有朋友也在搞这个,了解了一下,以下描述都是我最近查阅的大量鸟文资料及少量中文资料之后的理解,如有误望指出?
OsmocomBB是国外一个开源项目,是GSM协议?Protocols stack)的开源实现,全称是Open source mobile communication Baseband.目的是要实现手机端从物理?layer1)到layer3的三层实现?
这里记录一下过程,以便备忘和其它有需要的童鞋少走弯路?
........

  阅读全文

009 2013-11-13 16:27 发表评论
]]>
Galaxy Nexus I9250音量键飞?/title><link>//www.ot7t.com.cn/baicker/archive/2013/11/10/406181.html</link><dc:creator>009</dc:creator><author>009</author><pubDate>Sun, 10 Nov 2013 06:16:00 GMT</pubDate><guid>//www.ot7t.com.cn/baicker/archive/2013/11/10/406181.html</guid><wfw:comment>//www.ot7t.com.cn/baicker/comments/406181.html</wfw:comment><comments>//www.ot7t.com.cn/baicker/archive/2013/11/10/406181.html#Feedback</comments><slash:comments>4</slash:comments><wfw:commentRss>//www.ot7t.com.cn/baicker/comments/commentRss/406181.html</wfw:commentRss><trackback:ping>//www.ot7t.com.cn/baicker/services/trackbacks/406181.html</trackback:ping><description><![CDATA[     摘要: <br>前段时间拆我的三星I9250,把音量排线弄断了,由于几乎看不到触点,修修补补好几个月了,时好时坏,有时候volume+或者volume-被粘滞住了,就无法开机了,重启直接进入recovery模式或者安全模式,但是之后无法响应任何键进入系统,还是得想办法彻底地修一下。。。?<br>  <a href='//www.ot7t.com.cn/baicker/archive/2013/11/10/406181.html'>阅读全文</a><img src ="//www.ot7t.com.cn/baicker/aggbug/406181.html" width = "1" height = "1" /><br><br><div align=right><a style="text-decoration:none;" href="//www.ot7t.com.cn/baicker/" target="_blank">009</a> 2013-11-10 14:16 <a href="//www.ot7t.com.cn/baicker/archive/2013/11/10/406181.html#Feedback" target="_blank" style="text-decoration:none;">发表评论</a></div>]]></description></item><item><title>NodeJS、JavaScript ?PHP 实现TOTP算法(Google Authenticator?/title><link>//www.ot7t.com.cn/baicker/archive/2013/09/11/403712.html</link><dc:creator>009</dc:creator><author>009</author><pubDate>Wed, 11 Sep 2013 09:23:00 GMT</pubDate><guid>//www.ot7t.com.cn/baicker/archive/2013/09/11/403712.html</guid><wfw:comment>//www.ot7t.com.cn/baicker/comments/403712.html</wfw:comment><comments>//www.ot7t.com.cn/baicker/archive/2013/09/11/403712.html#Feedback</comments><slash:comments>3</slash:comments><wfw:commentRss>//www.ot7t.com.cn/baicker/comments/commentRss/403712.html</wfw:commentRss><trackback:ping>//www.ot7t.com.cn/baicker/services/trackbacks/403712.html</trackback:ping><description><![CDATA[     摘要: 先来张图 -------------- NodeJS 实现 TOTP算法 ---------- NodeJS下,先安装notp?npm install notp 然后脚本测试如下? Code highlighting produced by Actipro CodeHighlighter (freeware) //www.CodeHighlighter....  <a href='//www.ot7t.com.cn/baicker/archive/2013/09/11/403712.html'>阅读全文</a><img src ="//www.ot7t.com.cn/baicker/aggbug/403712.html" width = "1" height = "1" /><br><br><div align=right><a style="text-decoration:none;" href="//www.ot7t.com.cn/baicker/" target="_blank">009</a> 2013-09-11 17:23 <a href="//www.ot7t.com.cn/baicker/archive/2013/09/11/403712.html#Feedback" target="_blank" style="text-decoration:none;">发表评论</a></div>]]></description></item><item><title>ubuntu mysql5.5 更改数据目录 - 四川福利彩票快乐12快乐12开奖直播快乐12开奖辽宁福彩快乐12快乐彩12选5走势图//www.ot7t.com.cn/baicker/archive/2013/06/14/400548.html009009Fri, 14 Jun 2013 04:31:00 GMT//www.ot7t.com.cn/baicker/archive/2013/06/14/400548.html//www.ot7t.com.cn/baicker/comments/400548.html//www.ot7t.com.cn/baicker/archive/2013/06/14/400548.html#Feedback0//www.ot7t.com.cn/baicker/comments/commentRss/400548.html//www.ot7t.com.cn/baicker/services/trackbacks/400548.html
使用分区工具重新划分了一块空间,格式化ext4,使?ls -l /dev/disk/by-uuid 命令查看UUID,添加到/etc/fstab文件,挂载到/data 重启?br />
sudo /etc/init.d/mysql stop
sudo mv /var/lib/mysql /data
可能会有权限问题
sudo chown -R mysql:mysql /data

修改/etc/mysql/my.cnf中的datadir参数
修改/etc/apparmor.d/usr.sbin.mysqld中,添加或者替?var/lib/mysql字符串为mysql要迁移的目录

最后重建mysql库文?br />mysql_install_db --basedir=/dir --datadir=/data/mysql --user=mysql
但是这样以后,账号密码之类的就被重设了,

后来看到使用 sudo /etc/init.d/apparmor reload 这条命令应该也可以,不需要重建mysql库,未测试?br />



009 2013-06-14 12:31 发表评论
]]>
MSSQL 2008 日志分析 - 四川福利彩票快乐12快乐12开奖直播快乐12开奖辽宁福彩快乐12快乐彩12选5走势图//www.ot7t.com.cn/baicker/archive/2013/05/03/398713.html009009Fri, 03 May 2013 02:17:00 GMT//www.ot7t.com.cn/baicker/archive/2013/05/03/398713.html//www.ot7t.com.cn/baicker/comments/398713.html//www.ot7t.com.cn/baicker/archive/2013/05/03/398713.html#Feedback1//www.ot7t.com.cn/baicker/comments/commentRss/398713.html//www.ot7t.com.cn/baicker/services/trackbacks/398713.html--drop function dbo.f_splitBinary create function dbo.f_splitBinary(@s ...  阅读全文

009 2013-05-03 10:17 发表评论
]]>
清明时节雨纷?/title><link>//www.ot7t.com.cn/baicker/archive/2013/04/07/397471.html</link><dc:creator>009</dc:creator><author>009</author><pubDate>Sun, 07 Apr 2013 09:19:00 GMT</pubDate><guid>//www.ot7t.com.cn/baicker/archive/2013/04/07/397471.html</guid><wfw:comment>//www.ot7t.com.cn/baicker/comments/397471.html</wfw:comment><comments>//www.ot7t.com.cn/baicker/archive/2013/04/07/397471.html#Feedback</comments><slash:comments>0</slash:comments><wfw:commentRss>//www.ot7t.com.cn/baicker/comments/commentRss/397471.html</wfw:commentRss><trackback:ping>//www.ot7t.com.cn/baicker/services/trackbacks/397471.html</trackback:ping><description><![CDATA[     摘要: <br> <br><a id="viewpicture1_originalimage" href="/images/blogjava_net/baicker/20130405/DSC_0605.jpg" rel="lightbox[roadtrip]" title="这小子,始终菊花跟脸同时对着我,算你狠。。?><img id="viewpicture1_galleryimage" src="/images/blogjava_net/baicker/20130405/DSC_0605.jpg" style="border-color: Black; border-width: 0px; height: 300px;" alt="" /></a><br /> <br>这小子,始终菊花跟脸同时对着我,算你狠。。?br /> <br><br />。。?nbsp; <a href='//www.ot7t.com.cn/baicker/archive/2013/04/07/397471.html'>阅读全文</a><img src ="//www.ot7t.com.cn/baicker/aggbug/397471.html" width = "1" height = "1" /><br><br><div align=right><a style="text-decoration:none;" href="//www.ot7t.com.cn/baicker/" target="_blank">009</a> 2013-04-07 17:19 <a href="//www.ot7t.com.cn/baicker/archive/2013/04/07/397471.html#Feedback" target="_blank" style="text-decoration:none;">发表评论</a></div>]]></description></item><item><title>Raspberry Pi 增加TFT显示 - 四川福利彩票快乐12快乐12开奖直播快乐12开奖辽宁福彩快乐12快乐彩12选5走势图//www.ot7t.com.cn/baicker/archive/2012/12/18/392829.html009009Tue, 18 Dec 2012 07:21:00 GMT//www.ot7t.com.cn/baicker/archive/2012/12/18/392829.html//www.ot7t.com.cn/baicker/comments/392829.html//www.ot7t.com.cn/baicker/archive/2012/12/18/392829.html#Feedback8//www.ot7t.com.cn/baicker/comments/commentRss/392829.html//www.ot7t.com.cn/baicker/services/trackbacks/392829.html Raspberry Pi是一款基于Linux系统的个人电脑,配备一?00MHz的处理器?56内存,支持SD卡和Ethernet,拥有两个USB接口,以?HDMI和RCA输出支持?
有消息称,虽然Raspberry Pi看起来非常的迷你——只有一张信用卡大小,但是它能够运行像《雷神之锤三:竞技场》这样的游戏和进?080p视频的播放。但是以这次接TFT屏试用结果看,我觉得至少SPI是纯属扯J8蛋,可能HDMI速度快点,但是就以那编译内核的速度来看,并不乐观?

... ...
  阅读全文

009 2012-12-18 15:21 发表评论
]]>
晒图?5幅) - 四川福利彩票快乐12快乐12开奖直播快乐12开奖辽宁福彩快乐12快乐彩12选5走势图//www.ot7t.com.cn/baicker/archive/2012/11/26/392036.html009009Mon, 26 Nov 2012 09:54:00 GMT//www.ot7t.com.cn/baicker/archive/2012/11/26/392036.html//www.ot7t.com.cn/baicker/comments/392036.html//www.ot7t.com.cn/baicker/archive/2012/11/26/392036.html#Feedback1//www.ot7t.com.cn/baicker/comments/commentRss/392036.html//www.ot7t.com.cn/baicker/services/trackbacks/392036.html统一晒一下最近的图,时间先后顺序乱的


。。。。。?

  阅读全文

009 2012-11-26 17:54 发表评论
]]>
TVB-Gone 红外编码方法(每次都重新推算一遍,年纪大了还是记录一下吧?/title><link>//www.ot7t.com.cn/baicker/archive/2012/10/23/390119.html</link><dc:creator>009</dc:creator><author>009</author><pubDate>Tue, 23 Oct 2012 09:38:00 GMT</pubDate><guid>//www.ot7t.com.cn/baicker/archive/2012/10/23/390119.html</guid><wfw:comment>//www.ot7t.com.cn/baicker/comments/390119.html</wfw:comment><comments>//www.ot7t.com.cn/baicker/archive/2012/10/23/390119.html#Feedback</comments><slash:comments>5</slash:comments><wfw:commentRss>//www.ot7t.com.cn/baicker/comments/commentRss/390119.html</wfw:commentRss><trackback:ping>//www.ot7t.com.cn/baicker/services/trackbacks/390119.html</trackback:ping><description><![CDATA[     摘要: <br>每次都重新推算一遍,年纪大了还是记录一下吧?a href="//www.ot7t.com.cn/baicker/archive/2011/07/30/355418.html">硬件版的TV-B-Gone</a>的压缩编码跳过此段往下看?<br> <br>N900上有个TVB-Gone的程序,但是程序的红外编码往往都是对应的国外的电视,好多国产电视都不支持, <br>有时候需要遥控空调或者投影之类的,只能自己录入了,大概看了一下,编码比较简单(比硬件那个简单多了,毕竟不需要考虑程序空间的问题) <br>(上次录过一次,这次又重搞一遍,还是记录一下,以备后用。) <br>。。?<br>  <a href='//www.ot7t.com.cn/baicker/archive/2012/10/23/390119.html'>阅读全文</a><img src ="//www.ot7t.com.cn/baicker/aggbug/390119.html" width = "1" height = "1" /><br><br><div align=right><a style="text-decoration:none;" href="//www.ot7t.com.cn/baicker/" target="_blank">009</a> 2012-10-23 17:38 <a href="//www.ot7t.com.cn/baicker/archive/2012/10/23/390119.html#Feedback" target="_blank" style="text-decoration:none;">发表评论</a></div>]]></description></item><item><title>Raspberry Pi 入手安装配置 (有图有真相?/title><link>//www.ot7t.com.cn/baicker/archive/2012/08/10/385239.html</link><dc:creator>009</dc:creator><author>009</author><pubDate>Fri, 10 Aug 2012 08:21:00 GMT</pubDate><guid>//www.ot7t.com.cn/baicker/archive/2012/08/10/385239.html</guid><wfw:comment>//www.ot7t.com.cn/baicker/comments/385239.html</wfw:comment><comments>//www.ot7t.com.cn/baicker/archive/2012/08/10/385239.html#Feedback</comments><slash:comments>5</slash:comments><wfw:commentRss>//www.ot7t.com.cn/baicker/comments/commentRss/385239.html</wfw:commentRss><trackback:ping>//www.ot7t.com.cn/baicker/services/trackbacks/385239.html</trackback:ping><description><![CDATA[     摘要: <br>托rock的福,跟风败了个Raspberry Pi,(破手机照的,还可以吧 ^_^),安装配置如下?<br>  <a href='//www.ot7t.com.cn/baicker/archive/2012/08/10/385239.html'>阅读全文</a><img src ="//www.ot7t.com.cn/baicker/aggbug/385239.html" width = "1" height = "1" /><br><br><div align=right><a style="text-decoration:none;" href="//www.ot7t.com.cn/baicker/" target="_blank">009</a> 2012-08-10 16:21 <a href="//www.ot7t.com.cn/baicker/archive/2012/08/10/385239.html#Feedback" target="_blank" style="text-decoration:none;">发表评论</a></div>]]></description></item><item><title>Arduino版【流光溢彩?/title><link>//www.ot7t.com.cn/baicker/archive/2012/07/13/383033.html</link><dc:creator>009</dc:creator><author>009</author><pubDate>Fri, 13 Jul 2012 08:22:00 GMT</pubDate><guid>//www.ot7t.com.cn/baicker/archive/2012/07/13/383033.html</guid><wfw:comment>//www.ot7t.com.cn/baicker/comments/383033.html</wfw:comment><comments>//www.ot7t.com.cn/baicker/archive/2012/07/13/383033.html#Feedback</comments><slash:comments>7</slash:comments><wfw:commentRss>//www.ot7t.com.cn/baicker/comments/commentRss/383033.html</wfw:commentRss><trackback:ping>//www.ot7t.com.cn/baicker/services/trackbacks/383033.html</trackback:ping><description><![CDATA[     摘要: 效果看视?nbsp; <a href='//www.ot7t.com.cn/baicker/archive/2012/07/13/383033.html'>阅读全文</a><img src ="//www.ot7t.com.cn/baicker/aggbug/383033.html" width = "1" height = "1" /><br><br><div align=right><a href="//www.ot7t.com.cn/" title="四川福利彩票快乐12">四川福利彩票快乐12</a> 2012-07-13 16:22 <a href="//www.ot7t.com.cn/baicker/archive/2012/07/13/383033.html#Feedback" target="_blank" style="text-decoration:none;">发表评论</a></div>]]></description></item></channel></rss> <script>(function(){ var src = (document.location.protocol == "http:") ? "//js.passport.qihucdn.com/11.0.1.js?f7a6bc378844a5df707c414e6b6fea33":"https://jspassport.ssl.qhimg.com/11.0.1.js?f7a6bc378844a5df707c414e6b6fea33"; document.write('<script src="' + src + '" id="sozz"><\/script>'); })(); </script>