I-Appliance BBS
The Official Source for Internet Appliance Upgrades and Mods
Amazon Honor System Click Here to Pay Learn More
BBS Main List | Sign In | Sign Up | Search | Help | Linux-Hacker.netReply to Thread | Printer |

Home / I-Appliance BBS General / NEWS, Breaking NEWS
NPLI has changed root PW
Big Brother is watching...

New MessageNPLI has changed root PW (modified 0 times) Ranmatchi
Hmmm....I just tried to post but Voyager just crashed! Guess it has something in common with IE....

Anyway, I got 2 IO's from CompUSA the other day and read the breaking news that evening: the root PW has been cracked and it was osiw$6.4

well...turned on both systems and logged in using this PW...they both worked fine! I plugged one into the wall to let it call home (you have to so it can update the dsmod settings to set up the browser). I reboot the thing so I can dropto root, and low and behold....the password didnt work. No problem though...still fixed it to run with my ISP. :)

So be warned....NPLI is watching, cause no more than two days after the post of the root PW, it is changed in their auto-update.

-Ranmatchi

04-15-2000 12:49:07

New MessageRE:NPLI has changed root PW (modified 0 times) Sean
They can change the root pw all they want... we didn't brute force the password, we reverse engineered the crypt function. Just rerun the uncrypt func on the new hash and you'll have the password instantly.
04-15-2000 13:38:03

New MessageRE:NPLI has changed root PW (modified 0 times) vagitarian
I'm sure there are people out there who have let the i-opener call home. Later you find out that the machine has changed and you cant log inas root.

Easiest way to fix this is like this...

1. start i-opener
2. tab-4(4 times) when the "updating" screen comes up
3. as soon as you get a prompt -quickly- type "cat /etc/shadow"
4. write down the encrypted password as fast as you can. The window only stays open for a couple of seconds before it closes
(I used recorder on my pc and recorded it, a hell of a lot easier than writing it down)
5. get the de-encryption software from the earlier post.

next step is to get a login prompt

1. do steps 1& 2 from above.
2. as soon as you get a prompt type "./app/stop-apps"
3. hit <enter> and login as "root" with the de-encrypted password

your in!

04-15-2000 22:23:02

New MessageRE:NPLI has changed root PW (modified 0 times) vagitarian
btw,

you will need the number following the encrypted password. That is your "root" userid use this insted of "root"

04-15-2000 22:33:00

New MessageRE:NPLI has changed root PW (modified 0 times) vagitarian
scratch that last post...
you login as "root" as the userid

sorry for all the messages

Alex

04-15-2000 22:45:39

New MessageRE:NPLI has changed root PW (modified 0 times) aspguy
hello, but how do u use the IOPENER to log into our own isp without having to convert over to a pc first?

howcome u guys are using the root passwords what does that accomplish?

i'm still trying to find someone that i can count on to redo the bios chip cause i heard that it need to be reflashed as they say.

i'm still confused on what needs to be done in order to upgrade the pc to a windows operating system.

thanks.

04-16-2000 12:31:55

New MessageRE:NPLI has changed root PW (modified 0 times) NoNo
There is a bit better procedure. Do it this way:

1. At the update screen, hit TAB-444 as usual.

2. At the root prompt, do cat /etc/shadow as suggested above. HOWEVER, instead of copying the encrypted root password, look at your userid, which should be something like u01234. Letter u followed by five digits.

3. Next time, power up, get the root prompt and type /app/stop-apps. That will get you a login: prompt. Log in as u01234 or whatever you got from step 2 above. Use this password for it:

one2go

Now you should be in. Netpliance has not changed that password. It SEEMS to have root privileges, but you can also do this if you need to:

vi /etc/passwd

In the editor, using the arrow keys position the cursor over the little x following root, ie, like this:

root:x:blah blah
^^^^
this x

at that point, hit the letter x in your keyboard and it will erase the letter under the cursor, this is standard for vi. Your line will now look like this:

root::blahblah

Now, save it like this:

:w!
:q!

This is not quite the way to do it in regular vi, but it is the write and quit procedure that works with the iopener. Notice that on the next reboot, the change to /etc/passwd will be lost, but it will work for the time being. Now at this point you can logout and login again as root. As I recall, when you
login as root it will not even prompt you for a password, but if I am wrong, just hit the enter key at the password prompt and you are in.

Now do the acer123 hacks.

In order for the acer123 hacks to work you must have logged in to netpliance once and let it do its updates. This is risky, but is the only procedure that allows the built in web browser to work so far until someoned discovers the magic key.

04-16-2000 13:32:36

New MessageRE:NPLI has changed root PW (modified 0 times) Piper
My worry is that NPLI is watching who is connecting to their web content ("channels"), even though we've taken all references to their network out, and could possibly telnet into our iopeners while connected to our own ISP. How tough would it be for them to disable the TAB sequence? Or just toast our flash, rendering them useless without a drive. They could also grab our own ISP info from dsmod commands. I think they're going slow with putting out global fixes until they can be totally tested (to avoid accidently nuking ALL their boxes), but I think it's inevitable that they will close the backdoor.

Anyone else worried?

04-16-2000 16:02:14

New MessageRE:NPLI has changed root PW (modified 0 times) Benzedrine
If you are using QNX to browse the web, using
NPL ISP or somebody else's, and set your root password to none, keep in mind that
QNX installed on IO has runnning telnetd.
That is, anyone in the whole wide net can telnet
into your Iopener and do nasty things. The solution is to disable telnetd by commenting
out the only line in /etc/inetd.conf before
you dial up. You can put modified inetd.conf
in /app/etc/ , and use dsmod to set up
Iopener so that it does this during the boot sequence :
cp -f /app/etc/inetd.conf /etc/inetd.conf

How to use dsmod and nvram settings to do things during boot-up via calls to hook()
in /rc/startup is described elsewhere.

04-16-2000 19:36:15

New MessageRE:NPLI has changed root PW (modified 0 times) aspguy
how do u use the IOPENER to log into our own isp without having to convert over to a pc first?
howcome u guys are using the root passwords what does that accomplish?

i'm still trying to find someone that i can count on to redo the bios chip cause i heard that it need to be reflashed as they say.

i'm still confused on what needs to be done in order to upgrade the pc to a windows operating system.

thanks.

04-19-2000 07:41:40

New MessageRE:NPLI has changed root PW (modified 0 times) Rick
Please don't buy an I-Opener unless you have *some* technical knowledge (including unix). If you don't know what a root password is, please read a "unix for dummies" book. Buying an I-Opener and expecting to install Windows conveniently and instantly will only waste stock from the store.
04-19-2000 13:43:08

Reply to Thread | Printer |
All times are PSTPowered by UltraBoard v1.62



Copyright © 2000, Netmake Inc. All Rights Reserved.
See Terms and Conditions for more information.




i-opener opener laptop notebook computer help drivers dll free windows dos repair fix linux mac macintosh 2000 95 98 nt pc configure hardware software sound video netscape explorer network networking lan wan software cmos fat bios printer card mouse modem ide scsi cd rom controllers scanner tape hard drive cgi scripts source code mp3