Welcome, Guest. Please login or register.

Author Topic: NEC usb hack for mediator  (Read 34640 times)

Description:

0 Members and 1 Guest are viewing this topic.

Offline Jupp3

  • Sr. Member
  • ****
  • Join Date: Mar 2002
  • Posts: 364
    • Show all replies
    • http://jupp3.amigafin.org
Re: NEC usb hack for mediator
« on: November 10, 2011, 05:31:55 PM »
Great :-)

So finally elbox PCI bus works as every PCI bus should - working with ALL (USB) PCI cards regardless of "manufacturer" - after all, it's probably just a single number (manufacturer ID) (well, it's pretty obvious Elbox didn't manufacture those USB boards...)

So how long until Elbox comes up with an "important security fix for all Mediator users"? :-D

Sure, they might not be able to "prevent everything", but the first post proves, they aren't f.ex. checking for "correct" amount of USB ports (whatever happened to be on those they bought to resell at huge profit). There are likely LOTS of similar things the driver can check, but didn't yet, as there was no need to (as this kind of hacks weren't at least too public until now)

-EDIT-
I'm not a Mediator owner myself, but feel happy for all Mediator users, who finally can use USB card from ANY manufacturer (as long as the drivers are compatible), just like PCI was meant to be.
« Last Edit: November 10, 2011, 05:35:40 PM by Jupp3 »
 

Offline Jupp3

  • Sr. Member
  • ****
  • Join Date: Mar 2002
  • Posts: 364
    • Show all replies
    • http://jupp3.amigafin.org
Re: NEC usb hack for mediator
« Reply #1 on: November 11, 2011, 01:57:26 PM »
Quote from: Ratte;667423
Isnt it easier to modify the driver?
The mediator-pci-api has only one function to read the vendorid.
Remove it .. the code itself must snoop for a classid.
This part of the code should work without vendorid-check.


That's assuming it wasn't "protected" in any way. Some years back, doing that would have nuked your RDB!

Nowadays that code is (claimed to be) removed from the binary - or at least any outsider hasn't found it yet.

Anyway, regardless of whether or not it's there, I'm pretty sure it still has some other protections againist 3rd party patches. Of course there are likely ways around them.