March 2017
Intermediate to advanced
262 pages
5h 26m
Chinese
Content preview from 物联网设备安全
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.
傻瓜盒子
——
攻击
“
智能
”
电视
｜
135
5.3
理解和开发应用程序的世界
智能电视提供类似
Skype
这种流行的电视会议的应用程序。本节，我们将深入研究电视
中的应用程序，理解它们的工作机制和安全机制。未来，越来越多的人将在智能电视上
使用并依赖应用程序，因此滥用应用程序的潜在危险变得越来越高。这是因为应用程序
越多，在电视上运行的代码也必然会越多，代码中可能就包含安全漏洞。应用程序的普
及也会吸引恶意攻击者，他们对探索供给系统偷取数据的途径非常感兴趣。
5.3.1
固件解密
为了深入理解应用程序的工作方式，我们需要熟悉支持智能电视功能的基础平台。我们
已经讨论了应用在智能电视上的弱
XOR
加密机制，这种机制允许用户解密并修改固件。
在新型号的智能电视上，三星已经采用
AES
加密算法解决了这一问题。然而，加密密钥
却被泄露给公众了。目前还不清楚这是怎么发生的，但是
SamyGO
网站的工具就包含了
这一密钥，而且很容易解密从三星网站上下载的固件。
先看一个我们已知使用
AES
加密过的固件版本：
$
ls -l T-ECPDEUC/image/
total 197164
-rw-rw-r-- 1 apple apple 192794916 Apr 29 2013 exe.img.sec
-rw-rw-r-- 1 apple apple 132 Apr 29 2013 exe.img.sec.cmac
-rw-rw-r-- 1 apple apple 256 Apr 29 2013 exe.img.sec.cs
-rw-rw-r-- ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access
More than 5,000 organizations count on O’Reilly
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.Julian F.
I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.Addison B.
I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.Amir M.
I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.