Search found 23 matches

by lonewolf
Wed Dec 04, 2019 10:30 pm
Forum: EnvisaLink ( IP100D, IP170D, 2DS, 3, 4)
Topic: Envisalink - TPI Documentation
Replies: 112
Views: 682565

Re: Envisalink - TPI Documentation

cmh31909 wrote:Have there been any updated documents released? The only one's I can find are in this thread which is dated 2012, seven years old.
? Both of the PDFs in the first post of this thread are dated 2017-02-10.
by lonewolf
Sat Mar 30, 2019 7:37 pm
Forum: EnvisaLink ( IP100D, IP170D, 2DS, 3, 4)
Topic: Offline NTP time sync
Replies: 15
Views: 89176

Re: Offline NTP time sync

My question is even more fundamental than that. He claimed "... we all know that best secure option is to use in offline mode and connected to internet via VPN /firewall access." For one: If it's "connected to the Internet" it's not off-line. And they'd have to break EyezOn's en...
by lonewolf
Tue Jan 29, 2019 8:47 pm
Forum: EnvisaLink ( IP100D, IP170D, 2DS, 3, 4)
Topic: Envisalink - TPI Documentation
Replies: 112
Views: 682565

Re: Envisalink - TPI Documentation

With only SSH access, tcpdump -p -n -i <interface> -X -s0 -w capturefile.pcap host <ip address> is my go-to, and then just scp/rsync the capturefile.pcap file to your computer and open in Wireshark. Yeah, it's almost certainly the re-use of the source port which is causing it. Since the EVL never dr...
by lonewolf
Sun Jan 27, 2019 8:22 pm
Forum: EnvisaLink ( IP100D, IP170D, 2DS, 3, 4)
Topic: Envisalink - TPI Documentation
Replies: 112
Views: 682565

Re: Envisalink - TPI Documentation

My first response is, what does a tcpdump/wireshark packet capture show?

I've used LUA a couple times but never with sockets. Is it re-using the source port? If so, can you fix it so it uses a random source port for each connection?

This should probably be a new thread...
by lonewolf
Fri Jun 29, 2018 3:20 am
Forum: EnvisaLink ( IP100D, IP170D, 2DS, 3, 4)
Topic: Envisalink - TPI Documentation
Replies: 112
Views: 682565

Re: Envisalink - TPI Documentation

proo wrote:Is there a simple way to check the current partition status, short of running as an always-on server and keeping track at all times?
Send a 001 "status report" and one of the things you'll get back is a 65x - a 650 or 653 means it's ready but not armed while a 652 is already armed.
by lonewolf
Thu Jan 19, 2017 7:03 pm
Forum: EnvisaLink ( IP100D, IP170D, 2DS, 3, 4)
Topic: The Internet of Insecure Things
Replies: 10
Views: 14364

Re: The Internet of Insecure Things

When I bought our home, the very first thing I did was contact a local, reputable locksmith and have all the locks re-keyed. If I had not done that, and somebody'd subsequently burgled the home, would that have been the seller's fault, for failing to re-key all the locks for me? What, no blame on t...
by lonewolf
Thu Jan 19, 2017 6:54 pm
Forum: EnvisaLink ( IP100D, IP170D, 2DS, 3, 4)
Topic: The Internet of Insecure Things
Replies: 10
Views: 14364

Re: The Internet of Insecure Things

GrandWizard wrote:...
Looks like I was mistaken about the cableco devices. I coulda swore they recently moved to device-specific passwords.
by lonewolf
Tue Jan 10, 2017 7:29 am
Forum: EnvisaLink ( IP100D, IP170D, 2DS, 3, 4)
Topic: The Internet of Insecure Things
Replies: 10
Views: 14364

Re: The Internet of Insecure Things

That attitude was fine 10 years ago, but nowadays it is completely unacceptable. Speaking as an IT professional with better than 25 years experience in the field: I disagree. Put quite simply: Anybody who exposes their private LAN to the Internet such that IoT devices are readily-accessible by conn...
by lonewolf
Wed Jan 04, 2017 6:54 pm
Forum: EnvisaLink ( IP100D, IP170D, 2DS, 3, 4)
Topic: The Internet of Insecure Things
Replies: 10
Views: 14364

Re: The Internet of Insecure Things

That attitude was fine 10 years ago, but nowadays it is completely unacceptable. You will be singing a different tune when it is your server/network which is down because of a massive DDoS attack. The Oct 21st attack which brought down Dyn was caused by IoIT devices with default passwords. Users hav...
by lonewolf
Wed Jan 04, 2017 3:05 pm
Forum: EnvisaLink ( IP100D, IP170D, 2DS, 3, 4)
Topic: The Internet of Insecure Things
Replies: 10
Views: 14364

The Internet of Insecure Things

In this day and age of botnets taking over random IoIT, having a single default user/pass for everything is beyond stupid. At the absolute minimum the password should be the last 4 digits of the MAC or something, though a true random per-device password would be best. I just did a Shodan search. It ...