SSH users - security

Akai a while ago inserted some metrics related crap to your MPC... Here is how to get rid of it's ability to collect logs:

SSH into your mpc and head over to:



Next do:



then do:



You can exit ssh now or.. read below and do some tests to see for yourself.

essentially we are just deleting the sentry folder and then dummy-ing it with a file. That will stay persistant across firmware updates.

If you do

3.x


2.x


and then launch mpc manually with:



you will see references to the sentry process, if the folder exists the sentry will init. if the folder is dummied to a file sentry will fail init and MPC will continue to load.

opt out...

Also has anyone noticed on 3.xx on boot time the device starts making network connections? watch the light near your rj-45 jack. it lights right up, i'm gonna hunt that down and eradicate it. or just make you guys an xtables script that works for shutting off akai's call home features.

I can just picture it now, their servers with a complete list of active users, serial numbers, internet addresses etc. since inMusic has the ssh keys and often peoples root profile has no password they can just waltz on in.

If the dummy sentry file still gets called home , It would be good to send em a message .
Nosey ars.oles.

Ultros wrote:Also has anyone noticed on 3.xx on boot time the device starts making network connections? watch the light near your rj-45 jack. it lights right up, i'm gonna hunt that down and eradicate it. or just make you guys an xtables script that works for shutting off akai's call home features.

az0x-webserver - it has several endpoints (don't remember exact names though). It allow you to upload firmwares, test apps, you. maygive it access to a filesystem and other stuff.

#!/bin/sh
WORKING_DIR="/your/dir/here/"
systemctl stop az0x-webserver.service
sleep 5
az0x-webserver -web-document-root "$WORKING_DIR"
now place prepared .html doc the $WORKING_DIR and you may access it via web browser, here's poc:



EDIT:
btw. It's a good idea to change your posthog id in MPC.settings as well (yes, you have your own posthog account)

dustyslices wrote:

Ultros wrote:Also has anyone noticed on 3.xx on boot time the device starts making network connections? watch the light near your rj-45 jack. it lights right up, i'm gonna hunt that down and eradicate it. or just make you guys an xtables script that works for shutting off akai's call home features.

az0x-webserver - it has several endpoints (don't remember exact names though). It allow you to upload firmwares, test apps, you. maygive it access to a filesystem and other stuff.

#!/bin/sh
WORKING_DIR="/your/dir/here/"
systemctl stop az0x-webserver.service
sleep 5
az0x-webserver -web-document-root "$WORKING_DIR"
now place prepared .html doc the $WORKING_DIR and you may access it via web browser, here's poc:

EDIT:
btw. It's a good idea to change your posthog id in MPC.settings as well (yes, you have your own posthog account)

Haha i was poking at that too. nice man you killed it right off. You can make that better by adding your working dir entry to "/etc/profile" add some sed magic to auto mutate the config.

Ah wtf broski is that a cpp book?! *gag* the right topic in the wrong language. Nice to see you studying dsp though. all the cool kids do it!

we gotta get you on irc. you need to meet my friend wizardyesterday. he's a dsp dev who spend all his time on dsp. filters, signal correction, audio listeners, digital radio tuners. he does it all.