Cracking The Sony Mylo

[speculatrix]

aha, after much googling I found the Sony update web page:
http://esupport.sony.com/US/perl/model-swu.pl?mdl=COM1

I will download the updates and see what's inside!

[speculatrix]

hmm, well, all that's inside the exe is an update.bin file, which:
* doesn't have meaningful strings inside
* won't decompress with gunzip or bunzip
* won't mount with ext2, vfat
* won't untar or un-cpio

any ideas?

[Da_Blitz]

have you tried looking for sources and toolkits on thier site or on the CD? perhaps request them.

3b GPL:
Accompany it with a written offer, valid for at least three years, to give any third party, for a charge no more than your cost of physically performing source distribution, a complete machine-readable copy of the corresponding source code, to be distributed under the terms of Sections 1 and 2 above on a medium customarily used for software interchange; or,

also

For an executable work, complete source code means all the source code for all modules it contains, plus any associated interface definition files, plus the scripts used to control compilation and installation of the executable. However, as a special exception, the source code distributed need not include anything that is normally distributed (in either source or binary form) with the major components (compiler, kernel, and so on) of the operating system on which the executable runs, unless that component itself accompanies the executable.

so we should see the auto tools they use as well to get everything into an image or update

i feel like some GPL musle might have to be applied to get kernel sources

actually i use to have a command line client for wince, problem was apart from the C# compiler there was nothing else that needed the command line

also just because its a good idea, IANAL

just a side note i wonder how the patent stuff in the GPL affects novell and microsoft (considering they have a linux lab). looks to me as if novel only just relised they made a mistake and are trying to cover thier arses

[speculatrix]

have you tried looking for sources and toolkits on thier site or on the CD? perhaps request them.
[div align=\"right\"][a href=\"index.php?act=findpost&pid=146794\"][{POST_SNAPBACK}][/a][/div]

well, perhaps the toolkit would be interesting.. but I'm kind of hoping for some interesting run-time stuff.

[Da_Blitz]

actually it reminds me of the linksys toolkit which included more than they needed to release, but it would have the scripts to build an image so you could learn how to deconstruct it and then inject some files or browse the file tree

[speculatrix]

hmm, well, all that's inside the exe is an update.bin file, which:
* doesn't have meaningful strings inside
* won't decompress with gunzip or bunzip
* won't mount with ext2, vfat
* won't untar or un-cpio

any ideas?
[div align=\"right\"][a href=\"index.php?act=findpost&pid=146778\"][{POST_SNAPBACK}][/a][/div]

I've also tried mounting with squashfs and cramfs, and no joy. It must be some raw binary dump rom image. I guess we'll have to hope someone with a MyLo comes along to the forum and asks for help hacking it

[speculatrix]

here's a japanese site with the mylo dismantled:
http://pc.watch.impress.co.jp/docs/2006/1106/pda53.htm

Looks like it might as well have been made by Samsung - it uses their flash, their dram, their wireless...

as expected, it's an Arm MX21 processor.

[rectaacies]

this deserves a HUGE bump....

[speculatrix]

oh, yes... I had a quick peek at one in, erm, bestbuy or circuitcity (one of those, on a trip to phoenix USA).

for the US$350 or UK£180, I would have expected something which felt more substantial. it wasn't being demoed, so maybe it was a dummy unit, but unless I'd known what it was I'd barely have given it a second glance. I only briefly considered buying it in the hope of hacking it it was that tacky/overpriced.

anyway, I googled again and not found much evidence of people hacking into it,  but some on the skype forum said others had shell access, so I have asked for references... follow it here:
http://forum.skype.com/index.php?showtopic=71961


other site to watch:
http://www.mylohacks.org/

[speculatrix]

ah, very interesting, one of the team who ported skype to the mylo has a blog:
http://www.oberle.org/blog/2006/08/10/skyp...e-new-sony-mylo

I added a msg to the blog to ask if he could give any technical info about skype on mylo.

[jfv]

I got a Mylo!  (Got it the day the forums went down and been waiting for days to say this). Anyhow, now what? Any suggestions? It came with firmware 1.1 which is a pity since the 1.0 version had our old friend ftp on port 4242. So far all I managed to do is view the file system using a trick with a webpage that I learned from the mylo forums. In this way it's possible to see what is in there and also to read text files (such as configuration files and shell scripts). I have not found a way to copy files, let alone run files. There is a part of the file system that I can read and write by accessing it as a mass storage device but there is no way to execute a program from that part of the file system.

Looking forward to hear some good suggestions!

[speculatrix]

how much did it cost if you don't mind me asking?

which mylo forums are you referring to?

is there a chance of downgrading the firmware to get back the 4242/ftp?

can you see any part of the system, e.g. /etc, using the web interface, and save any of the system files to the space accessible from usb mass storage interface

can you see the web interface  from another machine...
can you try nmap'ping it to see what ports might be open?

what files can you see via usb mass storage... if you put anything there, can it be seen by the mylo, and if you copy an executable file, is there a chance of executing it?


sorry for the deluge of questions!

[jfv]

>how much did it cost if you don't mind me asking?
I bought it lightly used for $200.

>which mylo forums are you referring to?
www.myloforums.net

>is there a chance of downgrading the firmware to get back the 4242/ftp?
AFAIK the 1.0 firmware is not available for download so I can't even try.

>can you see any part of the system, e.g. /etc, using the web interface, and save any >of the system files to the space accessible from usb mass storage interface
See yes, save no.

>can you see the web interface  from another machine...
No. What I'm doing is just a trick to emulate typing file://... on the web browser, which doesn't work, but if you make a web page saved locally and create the right links, it works. It's described in the mylo forums, under hacks.

>can you try nmap'ping it to see what ports might be open?
There was nothing open if I remember right. It didn't respond to the usual nmap and I had to use -P0.

>what files can you see via usb mass storage... if you put anything there, can it be seen by the mylo,
I can see the folders where music, pictures, web pages, etc are stored and I can put stuff there, yes.

>and if you copy an executable file, is there a chance of executing it?
No mechanism for execution as far as I can see.

>sorry for the deluge of questions!
Keep them coming!

[speculatrix]

is it possible to tell what version of the kernel is running?

can you format memory card with ext2 (linux fmt) and put softlinks on the card to the system directories and thus browse the whole file system from external device?

--edit ext3->ext2

[jfv]

is it possible to tell what version of the kernel is running?

can you format memory card with ext2 (linux fmt) and put softlinks on the card to the system directories and thus browse the whole file system from external device?

--edit ext3->ext2
[div align=\"right\"][a href=\"index.php?act=findpost&pid=153338\"][{POST_SNAPBACK}][/a][/div]

I will check to see if I can tell which version of the kernel is running. I don't have the mylo with me right now.

The idea with the memory card is a good one, thanks. However, I don't have a Sony memory stick, which is the only option for the mylo. I'll see if I can get hold of one.