This video demonstrates why you should change your default bluetooth headset pin. This user, “brandon90″ from Wyoming demonstrates how he can eavesdrop a conversation even if the bluetooth is not connected to a phone call. You can still listen in on the microphone, and even inject arbitrary audio to the headset.

He uses a linux laptop, with a Bluetooth dongle, a high gain DB antenna and his Nokia phone to do this. Watch the video below for the demonstration. The tool he is running is called “car whisperer” which can be installed on any linux laptop.

enjoy…


More How to hack videos at 5min.com

I like it when I find utilities to make the easy things easy. Ubuntu Tweak is just that kind of application. It’s a simple download / install, and then you are off configuring the little nuances on your system.

The “Computer” tab allows you to quickly view all of your system information. It will list the host name, distribution, kernel version, platform, CPU, Memory, current user and environment information. Ubuntu Tweak 0.2

Ubuntu Tweak allows the end user to easily change what starts at bootup . login, modify security settings as well as system and user interface configurations. This tool is great to have in your system tool apps and I would recommend it for the new user, as well as the experienced. Like I said, I like it when the easy things are easy.

Official Download

Linuxcrypt Mirror – Ubuntu

Have you received an error like this?

totem_error.png

If you have, then follow these instructions to get you up and running.

1. $gksudo gedit /etc/apt/sources.list

2. Add the following to the bottom of your sources.list file

## Medibuntu - Ubuntu 7.04 “Feisty Fawn”
## Please report any bug on https://launchpad.net/products/medibuntu/+bugs
deb http://medibuntu.sos-sts.com/repo/ edgy free non-free
deb-src http://medibuntu.sos-sts.com/repo/ edgy free non-free

3. Save your file

4. Import key, copy and paste the following in your terminal

wget -q http://medibuntu.sos-sts.com/repo/medibuntu-key.gpg -O- | sudo apt-key add -

5. sudo apt-get update

6. sudo apt-get install libdvdcss2 w32codecs

You should now be able to watch your legally purchased DVD movies on your linux system.

-j

Quick and dirty for installing your multimedia codecs on your newly installed ubuntu (7.04) system.

From the command line run

$sudo aptitude install gstreamer0.10-pitfdll gstreamer0.10-ffmpeg gstreamer0.10-gl gstreamer0.10-plugins-base gstreamer0.10-plugins-good gstreamer0.10-plugins-bad gstreamer0.10-plugins-bad-multiverse gstreamer0.10-plugins-ugly gstreamer0.10-plugins-ugly-multiverse libxine-extracodecs w32codecs

(just copy and paste the above string)

This should get you up to speed with the most commonly used codecs.

-j

To use public keys with and ssh server, you’ll first need to generate a public/private key pair:

$ ssh-keygen -t rsa

You can also use -t dsa for DSA Keys, or a -t rsa1 if you’re using Protocol v1. If you are then you should upgrade to v2 because I said so.

After you enter the above command, you should see something like this:

Generating public/private rsa key pair.
Enter file in which to save the key (/home/josh/.ssh/id_rsa):

Just hit (enter), it will then ask you for a pass phrase; just hit (enter) twice: but read the security note.

This created two files: (/home/josh/.ssh/id_rsa) and (/home/josh/.ssh/id_rsa.pub) To use this key-pair on a server, try this:

$ ssh server “mkdir .ssh; chmod 0700 .ssh”
$ scp .ssh/id_rsa.pub server: .ssh/authorized_keys2

Naturally, replace “server” with “your” server :) It should ask you for your password both times. Now, just run a:

$ ssh servername

It should log you in automatically without a password, it will also use your new public key for “scp” connections as well.

If this did not work, then check the permission values on both (/home/josh/.ssh/*) and (server:/home/josh/.ssh/*). Your private key (id_rsa) should be 0600 (and only be present on your local machine), and everything else should be 0655 or better.

*Security Concerns

Some people consider using keys as a possible security issue. This is a valid concern because your private key could potentially be copied, but then again, so could a password, so just remember to keep what’s private, protected, and what’s public ..well, public.

Enjoy,
Any questions feel free to post in the comments and I will try to answer.

~j

Well, give it time. According to Wired Magazine there are already reports of hackers accessing the shell within the iPhone. Apparently using a do-it-yourself iPhone to serial cable in conjunction with the iPhone interface application, they were able to get to a shell which basically would give full privileges to the user on the iPhone. I can’t wait to see what happens next, I see a Linux distribution running on it in now time :)

~j

Sources:
Wired Magazine
iPhone Unlocked