TSZ
Member
- Joined
- Aug 30, 2021
- Messages
- 248
- Reaction score
- 250
- Points
- 1,735
- Age
- 49
Item: 3 Ethernet-to-Serial Bridges (Arduino Compatible) (2pcs W12161 and 1 pc W20655
Age: 2 months
Price: R200 for all 3
Payment Method Accepted: Cash/EFT
Warranty: Maybe
Warranty Holder: Me
Packaging: Yes original anti-static bags
Condition: Very good
Location: Blouberg/Tableview WC
Reason: Not fit for my demanding applications (see text explanation below)
Shipping: Yes at your cost and risk (Postnet only unfortunately R99)
Collection: Yes
Link: UART to Ethernet Bridge - Micro Robotics
Link: Wave Dual UART to Ethernet Module - Micro Robotics
Detailed Description
I have not opened the W20655, it is still sealed as delivered on the 17th of December 2021. I discovered the flaw over Christmas, by testing the one W12161.
Why I cannot use them
These things respond to a "magic packet" a UDP broadcast packet that allows their settings to be changed. This is a complete and utter security FAIL!
I have played around with one, and the software cannot be set to disable this behaviour therefore these things are OK if you're going to do something like control a fish tank using a protected network.
However, in my use cases, and particularly the fact that I am sticky about security, I cannot use them, moreover I cannot sell a finished product with them knowing that anyone with netcat can craft a packet and make the unit unusable by jimmying its settings.
Aside from the above mentioned flaw, they do work well. If you connect one to an Arduino you can do both TCP client and host.
As you will realise I am selling at a loss, but I don't mind.
--------
Age: 2 months
Price: R200 for all 3
Payment Method Accepted: Cash/EFT
Warranty: Maybe
Warranty Holder: Me
Packaging: Yes original anti-static bags
Condition: Very good
Location: Blouberg/Tableview WC
Reason: Not fit for my demanding applications (see text explanation below)
Shipping: Yes at your cost and risk (Postnet only unfortunately R99)
Collection: Yes
Link: UART to Ethernet Bridge - Micro Robotics
Link: Wave Dual UART to Ethernet Module - Micro Robotics
Detailed Description
I have not opened the W20655, it is still sealed as delivered on the 17th of December 2021. I discovered the flaw over Christmas, by testing the one W12161.
Why I cannot use them
These things respond to a "magic packet" a UDP broadcast packet that allows their settings to be changed. This is a complete and utter security FAIL!
I have played around with one, and the software cannot be set to disable this behaviour therefore these things are OK if you're going to do something like control a fish tank using a protected network.
However, in my use cases, and particularly the fact that I am sticky about security, I cannot use them, moreover I cannot sell a finished product with them knowing that anyone with netcat can craft a packet and make the unit unusable by jimmying its settings.
Aside from the above mentioned flaw, they do work well. If you connect one to an Arduino you can do both TCP client and host.
As you will realise I am selling at a loss, but I don't mind.
--------
- For your and my protection please read our guide to safe dealing: https://carbonite.co.za/index.php?threads/guide-for-safe-dealing-on-carbonite.131249/
- A deal is concluded for purposes of feedback when parties agree to a deal
