<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
		>
<channel>
	<title>Comments on: Strategic GeoIP Hacking and TV Streaming Theft</title>
	<atom:link href="http://www.gnucitizen.org/blog/strategic-geoip-hacking-and-tv-streaming-theft/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.gnucitizen.org/blog/strategic-geoip-hacking-and-tv-streaming-theft/</link>
	<description>Information Security Think Tank</description>
	<lastBuildDate>Mon, 12 Dec 2011 19:56:03 +0000</lastBuildDate>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.1.2</generator>
	<item>
		<title>By: NerdBert</title>
		<link>http://www.gnucitizen.org/blog/strategic-geoip-hacking-and-tv-streaming-theft/comment-page-1/#comment-128489</link>
		<dc:creator>NerdBert</dc:creator>
		<pubDate>Wed, 21 Apr 2010 07:40:53 +0000</pubDate>
		<guid isPermaLink="false">http://www.gnucitizen.org/blog/strategic-geoip-hacking-and-tv-streaming-theft#comment-128489</guid>
		<description>I used a Slingbox for a while but ended up ditching it. Nowadays internet speeds are so fast that I can access TV via the internet.  I&#039;m in Europe, so I use a VPN service to connect to either the US or UK (VPN gives me a local IP address, thus working around the outside the &quot;US/UK&quot; country blocking). Three of the best sites are Hulu, SeeSaw and BBC iPlayer.

Here is a good updated list of the US/UK TV networks with free internet streaming http://www.vpntelevision.com Good luck in your quest for TV online!

Uncle Abe</description>
		<content:encoded><![CDATA[<p>I used a Slingbox for a while but ended up ditching it. Nowadays internet speeds are so fast that I can access TV via the internet.  I&#8217;m in Europe, so I use a VPN service to connect to either the US or UK (VPN gives me a local IP address, thus working around the outside the &#8220;US/UK&#8221; country blocking). Three of the best sites are Hulu, SeeSaw and BBC iPlayer.</p>
<p>Here is a good updated list of the US/UK TV networks with free internet streaming <a href="http://www.vpntelevision.com" rel="nofollow">http://www.vpntelevision.com</a> Good luck in your quest for TV online!</p>
<p>Uncle Abe</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: sean</title>
		<link>http://www.gnucitizen.org/blog/strategic-geoip-hacking-and-tv-streaming-theft/comment-page-1/#comment-117213</link>
		<dc:creator>sean</dc:creator>
		<pubDate>Sun, 23 Mar 2008 10:40:52 +0000</pubDate>
		<guid isPermaLink="false">http://www.gnucitizen.org/blog/strategic-geoip-hacking-and-tv-streaming-theft#comment-117213</guid>
		<description>Very interesting article. However, how do you handle the password part ? I understand you can designate a slingbox by its IP address, but how would you hack the password?

Thanks</description>
		<content:encoded><![CDATA[<p>Very interesting article. However, how do you handle the password part ? I understand you can designate a slingbox by its IP address, but how would you hack the password?</p>
<p>Thanks</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Adrian Pastor</title>
		<link>http://www.gnucitizen.org/blog/strategic-geoip-hacking-and-tv-streaming-theft/comment-page-1/#comment-74702</link>
		<dc:creator>Adrian Pastor</dc:creator>
		<pubDate>Tue, 20 Nov 2007 22:29:16 +0000</pubDate>
		<guid isPermaLink="false">http://www.gnucitizen.org/blog/strategic-geoip-hacking-and-tv-streaming-theft#comment-74702</guid>
		<description>@maze - Just run Wireshark while you try to authenticate with SlingPlayer. You can use the following filter on Wireshark: &lt;code&gt;ip.dst==targetIPaddress&lt;/code&gt;</description>
		<content:encoded><![CDATA[<p>@maze &#8211; Just run Wireshark while you try to authenticate with SlingPlayer. You can use the following filter on Wireshark: <code>ip.dst==targetIPaddress</code></p>
]]></content:encoded>
	</item>
	<item>
		<title>By: maze</title>
		<link>http://www.gnucitizen.org/blog/strategic-geoip-hacking-and-tv-streaming-theft/comment-page-1/#comment-74637</link>
		<dc:creator>maze</dc:creator>
		<pubDate>Tue, 20 Nov 2007 20:19:09 +0000</pubDate>
		<guid isPermaLink="false">http://www.gnucitizen.org/blog/strategic-geoip-hacking-and-tv-streaming-theft#comment-74637</guid>
		<description>anyone got an idea on how the auth works? im trying to get a brute forcer goin...</description>
		<content:encoded><![CDATA[<p>anyone got an idea on how the auth works? im trying to get a brute forcer goin&#8230;</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Adrian Pastor</title>
		<link>http://www.gnucitizen.org/blog/strategic-geoip-hacking-and-tv-streaming-theft/comment-page-1/#comment-73977</link>
		<dc:creator>Adrian Pastor</dc:creator>
		<pubDate>Mon, 19 Nov 2007 22:19:08 +0000</pubDate>
		<guid isPermaLink="false">http://www.gnucitizen.org/blog/strategic-geoip-hacking-and-tv-streaming-theft#comment-73977</guid>
		<description>@LordDoskias - I agree that security through obscurity is not the way to go. However, we all are in a comfort zone, and that is highly reflected in public security research. btw, I will check out &quot;Silver needle in the skype&quot; :-)

Nice nmap tips guys! I was familiar with the timing -T flags, but not the -PS flag.</description>
		<content:encoded><![CDATA[<p>@LordDoskias &#8211; I agree that security through obscurity is not the way to go. However, we all are in a comfort zone, and that is highly reflected in public security research. btw, I will check out &#8220;Silver needle in the skype&#8221; :-)</p>
<p>Nice nmap tips guys! I was familiar with the timing -T flags, but not the -PS flag.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: br4inmatic</title>
		<link>http://www.gnucitizen.org/blog/strategic-geoip-hacking-and-tv-streaming-theft/comment-page-1/#comment-73392</link>
		<dc:creator>br4inmatic</dc:creator>
		<pubDate>Mon, 19 Nov 2007 07:43:39 +0000</pubDate>
		<guid isPermaLink="false">http://www.gnucitizen.org/blog/strategic-geoip-hacking-and-tv-streaming-theft#comment-73392</guid>
		<description>&lt;code&gt;nmap -PS5001 -S5 -n -iL targets -p5001 -oG results&lt;/code&gt; yeah.. that&#039;s really make it much faster.</description>
		<content:encoded><![CDATA[<p><code>nmap -PS5001 -S5 -n -iL targets -p5001 -oG results</code> yeah.. that&#8217;s really make it much faster.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Dominik</title>
		<link>http://www.gnucitizen.org/blog/strategic-geoip-hacking-and-tv-streaming-theft/comment-page-1/#comment-73100</link>
		<dc:creator>Dominik</dc:creator>
		<pubDate>Sun, 18 Nov 2007 21:18:06 +0000</pubDate>
		<guid isPermaLink="false">http://www.gnucitizen.org/blog/strategic-geoip-hacking-and-tv-streaming-theft#comment-73100</guid>
		<description>Sorry, just made a typo. It should read -T5 and not -S5</description>
		<content:encoded><![CDATA[<p>Sorry, just made a typo. It should read -T5 and not -S5</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Dominik</title>
		<link>http://www.gnucitizen.org/blog/strategic-geoip-hacking-and-tv-streaming-theft/comment-page-1/#comment-73095</link>
		<dc:creator>Dominik</dc:creator>
		<pubDate>Sun, 18 Nov 2007 21:16:18 +0000</pubDate>
		<guid isPermaLink="false">http://www.gnucitizen.org/blog/strategic-geoip-hacking-and-tv-streaming-theft#comment-73095</guid>
		<description>My personal experience has been that scanrand is indeed fast, but also misses quite some open ports.

Yes, nmap _will_ run very slow with the provided command line. But you can speed it up quite a bit. First, scanning with -P0 is dead slow, because nmap has no round-trip-time information without a ping first, and will default to a slow scan mode. Second, nmap has a not-so-well documented fast single port scan mode. Third, you can speed things up by setting less conservative timing limits

An updated nmap command line would be: &lt;code&gt;nmap -PS5001 -S5 -n -iL targets -p5001 -oG results&lt;/code&gt;</description>
		<content:encoded><![CDATA[<p>My personal experience has been that scanrand is indeed fast, but also misses quite some open ports.</p>
<p>Yes, nmap _will_ run very slow with the provided command line. But you can speed it up quite a bit. First, scanning with -P0 is dead slow, because nmap has no round-trip-time information without a ping first, and will default to a slow scan mode. Second, nmap has a not-so-well documented fast single port scan mode. Third, you can speed things up by setting less conservative timing limits</p>
<p>An updated nmap command line would be: <code>nmap -PS5001 -S5 -n -iL targets -p5001 -oG results</code></p>
]]></content:encoded>
	</item>
	<item>
		<title>By: hackathology</title>
		<link>http://www.gnucitizen.org/blog/strategic-geoip-hacking-and-tv-streaming-theft/comment-page-1/#comment-72875</link>
		<dc:creator>hackathology</dc:creator>
		<pubDate>Sun, 18 Nov 2007 16:52:47 +0000</pubDate>
		<guid isPermaLink="false">http://www.gnucitizen.org/blog/strategic-geoip-hacking-and-tv-streaming-theft#comment-72875</guid>
		<description>unicornscan is the way to go</description>
		<content:encoded><![CDATA[<p>unicornscan is the way to go</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: LordDoskias</title>
		<link>http://www.gnucitizen.org/blog/strategic-geoip-hacking-and-tv-streaming-theft/comment-page-1/#comment-72818</link>
		<dc:creator>LordDoskias</dc:creator>
		<pubDate>Sun, 18 Nov 2007 15:19:07 +0000</pubDate>
		<guid isPermaLink="false">http://www.gnucitizen.org/blog/strategic-geoip-hacking-and-tv-streaming-theft#comment-72818</guid>
		<description>I think that &quot;tcp/ip is widely understood&quot; isn&#039;t a good argument. History has shown that &quot;security through obscurity&quot; doesn&#039;t work well. If tomorrow&#039;s technology is not tcp/ip or something else. Then it&#039;s a matter of time before someone document this technology. For example - &quot;Silver needle in the skype&quot; presented at BH &#039;06. And skype is thought to be one of the most &quot;hidden&quot; technologies out there.</description>
		<content:encoded><![CDATA[<p>I think that &#8220;tcp/ip is widely understood&#8221; isn&#8217;t a good argument. History has shown that &#8220;security through obscurity&#8221; doesn&#8217;t work well. If tomorrow&#8217;s technology is not tcp/ip or something else. Then it&#8217;s a matter of time before someone document this technology. For example &#8211; &#8220;Silver needle in the skype&#8221; presented at BH &#8217;06. And skype is thought to be one of the most &#8220;hidden&#8221; technologies out there.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Adrian Pastor</title>
		<link>http://www.gnucitizen.org/blog/strategic-geoip-hacking-and-tv-streaming-theft/comment-page-1/#comment-72466</link>
		<dc:creator>Adrian Pastor</dc:creator>
		<pubDate>Sun, 18 Nov 2007 03:55:10 +0000</pubDate>
		<guid isPermaLink="false">http://www.gnucitizen.org/blog/strategic-geoip-hacking-and-tv-streaming-theft#comment-72466</guid>
		<description>Hey Jason! I will try Scanrand when I have time. I&#039;ve also been wanting to play with Unicorn http://www.unicornscan.org/ for a while!</description>
		<content:encoded><![CDATA[<p>Hey Jason! I will try Scanrand when I have time. I&#8217;ve also been wanting to play with Unicorn <a href="http://www.unicornscan.org/" rel="nofollow">http://www.unicornscan.org/</a> for a while!</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Zeryl</title>
		<link>http://www.gnucitizen.org/blog/strategic-geoip-hacking-and-tv-streaming-theft/comment-page-1/#comment-72229</link>
		<dc:creator>Zeryl</dc:creator>
		<pubDate>Sat, 17 Nov 2007 07:52:03 +0000</pubDate>
		<guid isPermaLink="false">http://www.gnucitizen.org/blog/strategic-geoip-hacking-and-tv-streaming-theft#comment-72229</guid>
		<description>I re-wrote the shell script for this, in PHP.  It does all of the .csv&#039;s created from the other script, at once, and extremely quickly (about 5 seconds on a dual P3). Below is the code for it:

&lt;pre&gt;&lt;code&gt;&lt;?php

//Look through the local directory for *.csv
foreach (glob(&quot;*.csv&quot;) as $filename) {
    //Load the current file into the $lines array
    $lines = file($filename);
    
    $content = &#039;&#039;;

    foreach($lines as $line)
    {
        //Explode the start and end ip from the current line
        list($startIP, $endIP) = explode(&#039;,&#039;, $line);
        
        //Explode each octet of the current ip into arrays
        $start = explode(&#039;.&#039;, $startIP);
        $end   = explode(&#039;.&#039;, $endIP);
        
        //Parse each array for the ip
        for($i = 0; $i&lt;=3; $i++)
        {
            if($start[$i] == $end[$i])
            {
                $nmap[$i] = $start[$i];
            }
            else {
                $nmap[$i] = &quot;$start[$i]-$end[$i]&quot;;
            }
        }
        
        //Write the current namp&#039;ified IP to the variable
        $content .= &quot;$nmap[0].$nmap[1].$nmap[2].$nmap[3]\r\n&quot;;
    }
    
    //replace the extension with target
    $newfile = str_replace(&#039;csv&#039;, &#039;target&#039;, $filename);
    
    //write the file
    $size = file_put_contents($newfile, $content);
    echo(&quot;Wrote $newfile with a size of $size&lt;br /&gt;\r\n&quot;);    
}&lt;/code&gt;&lt;/pre&gt;</description>
		<content:encoded><![CDATA[<p>I re-wrote the shell script for this, in PHP.  It does all of the .csv&#8217;s created from the other script, at once, and extremely quickly (about 5 seconds on a dual P3). Below is the code for it:</p>
<pre><code>&lt;?php

//Look through the local directory for *.csv
foreach (glob("*.csv") as $filename) {
    //Load the current file into the $lines array
    $lines = file($filename);

    $content = '';

    foreach($lines as $line)
    {
        //Explode the start and end ip from the current line
        list($startIP, $endIP) = explode(',', $line);

        //Explode each octet of the current ip into arrays
        $start = explode('.', $startIP);
        $end   = explode('.', $endIP);

        //Parse each array for the ip
        for($i = 0; $i&lt;=3; $i++)
        {
            if($start[$i] == $end[$i])
            {
                $nmap[$i] = $start[$i];
            }
            else {
                $nmap[$i] = "$start[$i]-$end[$i]";
            }
        }

        //Write the current namp'ified IP to the variable
        $content .= "$nmap[0].$nmap[1].$nmap[2].$nmap[3]\r\n";
    }

    //replace the extension with target
    $newfile = str_replace('csv', 'target', $filename);

    //write the file
    $size = file_put_contents($newfile, $content);
    echo("Wrote $newfile with a size of $size&lt;br /&gt;\r\n");
}</code></pre>
]]></content:encoded>
	</item>
	<item>
		<title>By: Jason Macpherson</title>
		<link>http://www.gnucitizen.org/blog/strategic-geoip-hacking-and-tv-streaming-theft/comment-page-1/#comment-72059</link>
		<dc:creator>Jason Macpherson</dc:creator>
		<pubDate>Fri, 16 Nov 2007 19:54:14 +0000</pubDate>
		<guid isPermaLink="false">http://www.gnucitizen.org/blog/strategic-geoip-hacking-and-tv-streaming-theft#comment-72059</guid>
		<description>Nmap tends to be a little slow for large scans like this.  You&#039;ll get your results much faster if you used scanrand.  

http://www.doxpara.com/read.php/code/paketto.html</description>
		<content:encoded><![CDATA[<p>Nmap tends to be a little slow for large scans like this.  You&#8217;ll get your results much faster if you used scanrand.  </p>
<p><a href="http://www.doxpara.com/read.php/code/paketto.html" rel="nofollow">http://www.doxpara.com/read.php/code/paketto.html</a></p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Domber&#8217;s Basecamp &#187; Blog Archive &#187; Strategic Hacking: GEOIP</title>
		<link>http://www.gnucitizen.org/blog/strategic-geoip-hacking-and-tv-streaming-theft/comment-page-1/#comment-71996</link>
		<dc:creator>Domber&#8217;s Basecamp &#187; Blog Archive &#187; Strategic Hacking: GEOIP</dc:creator>
		<pubDate>Fri, 16 Nov 2007 15:13:00 +0000</pubDate>
		<guid isPermaLink="false">http://www.gnucitizen.org/blog/strategic-geoip-hacking-and-tv-streaming-theft#comment-71996</guid>
		<description>[...] The small shellscript provides you with information about country IP ranges. This can be quite usefull, for instance for the new TV streaming theft &#8230; [...]</description>
		<content:encoded><![CDATA[<p>[...] The small shellscript provides you with information about country IP ranges. This can be quite usefull, for instance for the new TV streaming theft &#8230; [...]</p>
]]></content:encoded>
	</item>
</channel>
</rss>

