??xml version="1.0" encoding="utf-8" standalone="yes"?>BlogJava-酒水不犯茶水http://www.qpkxbc.shop/baicker/<style> BODY {SCROLLBAR-FACE-COLOR: #A8D8A3;SCROLLBAR-HIGHLIGHT-COLOR: #A8D8A3; SCROLLBAR-SHADOW-COLOR: #7BAC75;SCROLLBAR-3DLIGHT-COLOR: #7BAC75; SCROLLBAR-ARROW-COLOR: #7BAC75; SCROLLBAR-TRACK-COLOR: #C4E5C0;SCROLLBAR-DARKSHADOW-COLOR: #A8D8A3; SCROLLBAR-BASE-COLOR: #A8D8A3;COLOR: #000000; FONT-FAMILY: "微Y雅黑,Arial,Verdana,arial,serif,宋体"; FONT-SIZE: 11px; background:#cdf1d1} TABLE {FONT-FAMILY: "微Y雅黑,Arial,Verdana,arial,serif,宋体"; FONT-SIZE: 11px;BORDER-COLLAPSE: collapse;border-top-width: 1px;border-right-width: 1px;border-bottom-width: 1px;border-left-width: 1px;border-top-style: solid;border-right-style: none;border-bottom-style: none;border-left-style: solid;border-top-color: #A3B67C;border-right-color: #A3B67C;border-bottom-color: #A3B67C;border-left-color: #A3B67C;} .tr {FONT-FAMILY: "微Y雅黑,Arial,Verdana,arial,serif,宋体";FONT-SIZE: 11px;background-color: #B0F790;text-align: center;} .td {FONT-FAMILY: "微Y雅黑,Arial,Verdana,arial,serif,宋体";FONT-SIZE: 11px;background-color: #c0e5c4;} .warningColor {FONT-FAMILY: "微Y雅黑,Arial,Verdana,arial,serif,宋体";FONT-SIZE: 21px;color: #ff0000;} input {BACKGROUND: #CDF1D1; BORDER-BOTTOM: #99D293 1px solid; BORDER-LEFT: #99D293 1px solid; BORDER-RIGHT: #99D293 1px solid; BORDER-TOP: #99D293 1px solid; COLOR: #000000; font-family: "微Y雅黑,Arial,Verdana,arial,serif,宋体"; FONT-SIZE: 12px; HEIGHT: 18px; PADDING-BOTTOM: 1px; PADDING-LEFT: 1px; PADDING-RIGHT: 1px; PADDING-TOP: 1px; onMouseOut: this.style.backgroundColor='#287A07' onMouseOver=this.style.backgroundColor='#000000'} .file{border:1px solid #99D293;color:#000000;background:#CDF1D1;font:normal 12px 微Y雅黑,Arial,Verdana,arial,serif,宋体;height:18px} textarea {BACKGROUND: #CDF1D1;FONT-FAMILY: "微Y雅黑,Arial,Verdana,arial,serif,宋体";BORDER-TOP-WIDTH: 1px;BORDER-LEFT-WIDTH: 1px;FONT-SIZE: 12px;BORDER-BOTTOM-WIDTH: 1px;BORDER-RIGHT-WIDTH: 1px;color: #000000;} .text {BACKGROUND: #CDF1D1;FONT-FAMILY: "微Y雅黑,Arial,Verdana,arial,serif,宋体";BORDER-TOP-WIDTH: 1px;BORDER-LEFT-WIDTH: 1px;FONT-SIZE: 12px;BORDER-BOTTOM-WIDTH: 1px;BORDER-RIGHT-WIDTH: 1px;color: #000000;} A:visited {FONT-SIZE: 9pt; COLOR: #808080; FONT-FAMILY: "微Y雅黑,Arial,Verdana,arial,serif,宋体"; TEXT-DECORATION: none;} A:active {FONT-SIZE: 9pt; COLOR: #287A07; FONT-FAMILY: "微Y雅黑,Arial,Verdana,arial,serif,宋体"; TEXT-DECORATION: none;} A:link {FONT-SIZE: 9pt; COLOR: #000000;FONT-FAMILY: "微Y雅黑,Arial,Verdana,arial,serif,宋体"; TEXT-DECORATION: none;} A:hover {FONT-SIZE: 9pt; COLOR: #00D000; FONT-FAMILY: "微Y雅黑,Arial,Verdana,arial,serif,宋体"; TEXT-DECORATION: none;} tr {FONT-FAMILY: "微Y雅黑,Arial,Verdana,arial,serif,宋体";font-size: 9pt;line-height: 18px;} td {FONT-FAMILY: "微Y雅黑,Arial,Verdana,arial,serif,宋体";font-size: 9pt;border-top-width: 1px;border-right-width: 1px;border-bottom-width: 1px;border-left-width: 1px;border-top-style: none;border-right-style: solid;border-bottom-style: solid;border-left-style: none;border-top-color: #A3B67C;border-right-color: #A3B67C;border-bottom-color: #A3B67C;border-left-color: #A3B67C;} .trHead {FONT-FAMILY: "微Y雅黑,Arial,Verdana,arial,serif,宋体";font-size: 9pt;background-color: #CDF1D1;line-height: 3px;} .inputLogin {FONT-FAMILY: "微Y雅黑,Arial,Verdana,arial,serif,宋体";font-size: 9pt;border: 1px solid #A3B67C;background-color: #CDF1D1;vertical-align: bottom;} .font-list {font-size: 9pt;color: #4DCD49;FONT-FAMILY: "微Y雅黑,Arial,Verdana,arial,serif,宋体";} select {BACKGROUND: #CDF1D1;FONT-FAMILY: "微Y雅黑,Arial,Verdana,arial,serif,宋体";BORDER-TOP-WIDTH: 1px;BORDER-LEFT-WIDTH: 1px;FONT-SIZE: 12px;BORDER-BOTTOM-WIDTH: 1px;BORDER-RIGHT-WIDTH: 1px;color: #000000;} .box{border:1px solid #C0C0C0;width:100%;height:19px;clip:rect(0px,181px,18px,0px);overflow:hidden;} .box2{border:1px solid #F4F4F4;width:100%;height:17px;clip:rect(0px,179px,16px,0px);overflow:hidden;} </style> <BR> 叶的dQ是风的q求q是树的不挽留? <BR>zh-cnSun, 25 Aug 2019 00:23:11 GMTSun, 25 Aug 2019 00:23:11 GMT60LimeSDR/bladeRF/USRP 搭徏LTE 4G伪基?/title><link>http://www.qpkxbc.shop/baicker/archive/2019/07/19/434237.html</link><dc:creator>009</dc:creator><author>009</author><pubDate>Fri, 19 Jul 2019 04:44:00 GMT</pubDate><guid>http://www.qpkxbc.shop/baicker/archive/2019/07/19/434237.html</guid><wfw:comment>http://www.qpkxbc.shop/baicker/comments/434237.html</wfw:comment><comments>http://www.qpkxbc.shop/baicker/archive/2019/07/19/434237.html#Feedback</comments><slash:comments>0</slash:comments><wfw:commentRss>http://www.qpkxbc.shop/baicker/comments/commentRss/434237.html</wfw:commentRss><trackback:ping>http://www.qpkxbc.shop/baicker/services/trackbacks/434237.html</trackback:ping><description><![CDATA[     摘要: <br>srsLTE代码主要分ؓ三个模块Q即srsUE、srseNB、srsEPCQ另外还包括一些底层的库函敎ͼ <br>srsUEQ实C物理层到IP层的LTE SDRq_Q?<br>srseNBQ全协议栈的LTE eNodeB SDRq_Q?<br>srsEPCQ轻量的LTE核心|实现^収ͼ包括HSS、MME以及S/P-GWQ?<br>libQ一套模块化的通用库,包括PHY、MAC、RLC、NAS、S1AP以及GW各层?<br>pȝQubuntu 16.04Q用实体机QUSB3.0Q千万不要用虚拟机,一些指令优化,时序。。。需要非常精准,比如双向验证鉴权的时候,差一炚w不行?<br>软g无线电:bladeRF x40QLimeSDR miniQUSRP B200 <br>写卡Q买白卡和写卡器Q不要问我,自己关键字搜吧,taobao不让卖了 <br>安装序QUHDQSoapySDRQSoapyUHDQLimeSuiteQbladeRFQsrsGUIQsrsLTE <br>。。?<br>  <a href='http://www.qpkxbc.shop/baicker/archive/2019/07/19/434237.html'>阅读全文</a><img src ="http://www.qpkxbc.shop/baicker/aggbug/434237.html" width = "1" height = "1" /><br><br><div align=right><a style="text-decoration:none;" href="http://www.qpkxbc.shop/baicker/" target="_blank">009</a> 2019-07-19 12:44 <a href="http://www.qpkxbc.shop/baicker/archive/2019/07/19/434237.html#Feedback" target="_blank" style="text-decoration:none;">发表评论</a></div>]]></description></item><item><title>巴厘岛四日游http://www.qpkxbc.shop/baicker/archive/2018/11/16/433501.html009009Fri, 16 Nov 2018 03:33:00 GMThttp://www.qpkxbc.shop/baicker/archive/2018/11/16/433501.htmlhttp://www.qpkxbc.shop/baicker/comments/433501.htmlhttp://www.qpkxbc.shop/baicker/archive/2018/11/16/433501.html#Feedback0http://www.qpkxbc.shop/baicker/comments/commentRss/433501.htmlhttp://www.qpkxbc.shop/baicker/services/trackbacks/433501.html一、行前准?/span>

1、衣 http://images.mafengwo.net/images/i/face/daily_v2/169.png
9月印和
北京 温差不是很大Q且降雨不多QM适合出游。但当地紫外U较强,除好看的衣裙外,防晒衫、防晒霜、帽子、泳衣、沙滩鞋是必备品

2、证 http://images.mafengwo.net/images/i/face/daily_v2/139.png
*出境?span style="color:red">护照
必须。此外,q徏议打印所?span style="color:red">航班的英文确认单Q拨打对应航司客服电话即可获取)+预定酒店的英文确认单Q若有包车,保留相应包R信息Q提前加好客服联pL式?br /> 3、行 http://images.mafengwo.net/images/i/face/daily_v2/114.png
*机票 公司有特h活动,预定的是东航直飞夜晚航班Q双人往q?K左右?br /> 参考航班: 北京 - 巴厘?/span> 东航 MU781 09.14 16:30~00:50
巴厘?/span> - 北京 东航 MU782 09.19 01:35~08:40
*包R 淘宝-按照评h{选的Q中文包??10时-320元左叟뀂可参考店铺:懒猫旅行、憨豆旅?br /> 4、电话卡、货?br /> *电话?购于淘宝Q几乎全E?G信号Q微信免量Q?0分钟印尼、国内通话费,插卡即用Q不?0块。购买渠道:飞猪-
西安优行旅游专营店?br /> *货币Q( 北京 Q需提前?a href="http://www.mafengwo.cn/travel-scenic-spot/mafengwo/21536.html" target="_blank">中国银行预约兑换Q?天兑换了2100多h民币Q?40万印盾Q行E结束后q有110万印盾左右。兑换当天需?a href="http://www.mafengwo.cn/travel-scenic-spot/mafengwo/21536.html" target="_blank">中国银行卡或现金及n份证兑换?

二、四天行E规?/span>


本次行程较短Q主要集中在巴厘岛南部活动,想体验火车、早赯也可以向北部行动?/span>


Day1Q?/span>

Ø 住宿 http://images.mafengwo.net/images/i/face/daily_v2/160.pngQ库塔宜必?Ibis Bali Kuta) Jl. Raya Kuta No. 77 Tel:(62-361)228228
预定途径:马蜂H,含税Q?00元,戉K较小。地理位|:距离机场较近的快捷酒店,大约3公里左右。机场出UR均不太正规,不打表随口要P此处推荐提前预定好接机司?淘宝/马蜂H?团均可Q?

Ø W一天包车行E?宜必思酒?库塔hW- 水明?/span> -L? 金巴?/span> 普拉玛帕N店(又称foxQ?br /> 库塔hW适合冲浪Q以上三个v滩排序:L庙> 水明?/span> Q库塔?br /> 库塔周边可以随意逛逛,之前做攻略,宜必思酒店对面有家港式餐厅,味道不错Q但我们当天出发太早Q没旉吃,有时间的朋友可以尝Qƈ且逛逛库塔,q是值得一逛。v庙门票大约30?人,库塔?水明?/span>免费?br />
Day2Q?/span>

Ø 住宿 http://images.mafengwo.net/images/i/face/daily_v2/160.pngQ?金巴?/span> 普拉 玛帕N?Pramapada Hotel Jimbaran) 卻IFOX HARRIS Jimbaran BeachQ?https://www.mafengwo.cn/hotel/16273806.html?iMddid=10460
地址QJalan Yoga Perkanthi No. 03, Bali, Indonesia

预定途径:马蜂H,含税Q?00元(不含早)

Ø W二天包车行E?nbsp;   酒店-鹰q场-乌鲁瓦图情h?padang padanghW- 金巴?/span> hW日落
鹰q场Q门?2.5万印盾/人,U合60?人,此景点不推荐Q就是几个带有历史背景意义的雕塑Q此处推荐用大众点评v外版Q可以查看到此景点的相关评hQ不推荐Q可以省下钱去蓝Ҏv滩(10万印盾Q?br /> *乌鲁瓦图情h?此处和v庙有些cMQMhW也比较美Q有好多猴子Q某些猴子还会调皮的抢走人的眼镜{东西,且很不好要回来。之前看ȝQ可以给工作人员费让帮忙拿回来Q实际上q找不到工作人员
http://images.mafengwo.net/images/i/face/daily_v2/54.png
*padang padang
hW M较小Q也有一些猴子,但是比较乖yQ不会来抢h东西Q左侧砂砾较大,右侧砂砾较细Qv有些大Q门大?.5万印盾Q记不太清了QM很小很便宜,人很?br /> * 金巴?/span> hW 预定?金巴?/span> 普拉 玛帕N?Pramapada Hotel Jimbaran) 距离hW100c_叻Iq,当天日落旉18:30Q看C美的日落?
Day3

Ø l箋住宿?/span>金巴?/span>普拉玛帕N?Pramapada Hotel Jimbaran)
行程Q?/span>蓝梦?/span>一日游 推荐,h蓝清澈,一D底!Q!

预定渠道Q淘?懒猫旅行外店,大家可以Ҏ自己需要、按照好评筛选,我当旉的是三处Q?底漫步Q?00元左叟뀂三处Q潜的W二处Q潜特别美Q在底看到了各色的鱹{珊瑚,以及 http://images.mafengwo.net/images/i/face/daily_v2/83.png。上午是上׃及Q潜等Q下午带着大家l岛看景点:恉的眼泪(强推Q、梦qLv滩,预定时说赠送预定红树林Q但是当天ƈ没有带大家看?br /> Day4Q?/span>

Ø l箋住宿金巴?/span>普拉玛帕N?Pramapada Hotel Jimbaran)

Ø 金巴?/span> hWw卧一?br /> ׃前三天比较篏Q行E较Ӟ最后一天决定在金巴?/span>hW卧倒一天,U赁遮阳伞、h椅ƈ不贵Qh了一?http://images.mafengwo.net/images/i/face/daily_v2/79.png
推荐 金巴?/span>普拉玛帕N店附q的吃处Q?、金悦轩_菜鲜厅Q可车接车送,大众点评搜烦可添加中文客服微信,可用微信、美团?、coco supermarketQ出酒店双{-双{Q直行大?公里左右卛_看到q家市Q超市旁Ҏ一家叫做:heineken的餐馆,h便宜Q味道不错,晚餐两h不到25块h民币?/span>

 



009 2018-11-16 11:33 发表评论
]]>
回龙?霍营 冯京Q?5801282705 Q?徐洪霞(18611186273 Q?黑中?已胜?/title><link>http://www.qpkxbc.shop/baicker/archive/2016/10/27/431938.html</link><dc:creator>009</dc:creator><author>009</author><pubDate>Thu, 27 Oct 2016 04:12:00 GMT</pubDate><guid>http://www.qpkxbc.shop/baicker/archive/2016/10/27/431938.html</guid><wfw:comment>http://www.qpkxbc.shop/baicker/comments/431938.html</wfw:comment><comments>http://www.qpkxbc.shop/baicker/archive/2016/10/27/431938.html#Feedback</comments><slash:comments>0</slash:comments><wfw:commentRss>http://www.qpkxbc.shop/baicker/comments/commentRss/431938.html</wfw:commentRss><trackback:ping>http://www.qpkxbc.shop/baicker/services/trackbacks/431938.html</trackback:ping><description><![CDATA[     摘要: <br>已胜?<br>见图 <br>  <a href='http://www.qpkxbc.shop/baicker/archive/2016/10/27/431938.html'>阅读全文</a><img src ="http://www.qpkxbc.shop/baicker/aggbug/431938.html" width = "1" height = "1" /><br><br><div align=right><a style="text-decoration:none;" href="http://www.qpkxbc.shop/baicker/" target="_blank">009</a> 2016-10-27 12:12 <a href="http://www.qpkxbc.shop/baicker/archive/2016/10/27/431938.html#Feedback" target="_blank" style="text-decoration:none;">发表评论</a></div>]]></description></item><item><title>回龙?霍营 冯京Q?5801282705 Q?徐洪霞(18611186273 Q?黑中?泼皮无赖Q讨要押?反被持刀要挟QZTQ?/title><link>http://www.qpkxbc.shop/baicker/archive/2016/10/24/431920.html</link><dc:creator>009</dc:creator><author>009</author><pubDate>Mon, 24 Oct 2016 15:22:00 GMT</pubDate><guid>http://www.qpkxbc.shop/baicker/archive/2016/10/24/431920.html</guid><wfw:comment>http://www.qpkxbc.shop/baicker/comments/431920.html</wfw:comment><comments>http://www.qpkxbc.shop/baicker/archive/2016/10/24/431920.html#Feedback</comments><slash:comments>0</slash:comments><wfw:commentRss>http://www.qpkxbc.shop/baicker/comments/commentRss/431920.html</wfw:commentRss><trackback:ping>http://www.qpkxbc.shop/baicker/services/trackbacks/431920.html</trackback:ping><description><![CDATA[     摘要: <br>已胜?<br>回龙?霍营 冯京Q?5801282705 Q?徐洪霞(18611186273 Q?黑中?泼皮无赖Q讨要押?反被持刀要挟QZTQ?<br>帮忙转一个帖?<br>15801282705 冯京 <br>18611186273 徐洪? <br>原帖Q?a href=http://tieba.baidu.com/p/4788411623 target=_blank>http://tieba.baidu.com/p/4788411623</a> <br> <br> <br> <br>  <a href='http://www.qpkxbc.shop/baicker/archive/2016/10/24/431920.html'>阅读全文</a><img src ="http://www.qpkxbc.shop/baicker/aggbug/431920.html" width = "1" height = "1" /><br><br><div align=right><a style="text-decoration:none;" href="http://www.qpkxbc.shop/baicker/" target="_blank">009</a> 2016-10-24 23:22 <a href="http://www.qpkxbc.shop/baicker/archive/2016/10/24/431920.html#Feedback" target="_blank" style="text-decoration:none;">发表评论</a></div>]]></description></item><item><title>回龙?霍营 冯京Q?5801282705 Q?徐洪霞(18611186273 Q?黑中介泼皮无赖,讨要押金反被持刀要挟QZTQ?/title><link>http://www.qpkxbc.shop/baicker/archive/2016/09/20/431813.html</link><dc:creator>009</dc:creator><author>009</author><pubDate>Tue, 20 Sep 2016 03:55:00 GMT</pubDate><guid>http://www.qpkxbc.shop/baicker/archive/2016/09/20/431813.html</guid><wfw:comment>http://www.qpkxbc.shop/baicker/comments/431813.html</wfw:comment><comments>http://www.qpkxbc.shop/baicker/archive/2016/09/20/431813.html#Feedback</comments><slash:comments>0</slash:comments><wfw:commentRss>http://www.qpkxbc.shop/baicker/comments/commentRss/431813.html</wfw:commentRss><trackback:ping>http://www.qpkxbc.shop/baicker/services/trackbacks/431813.html</trackback:ping><description><![CDATA[     摘要: <br>回龙?霍营 冯京Q?5801282705 Q?徐洪霞(18611186273 Q?黑中介泼皮无赖,讨要押金反被持刀要挟QZTQ?<br>帮忙转一个帖?<br>15801282705 冯京 <br>18611186273 徐洪? <br>原帖Q?a href=http://tieba.baidu.com/p/4788411623 target=_blank>http://tieba.baidu.com/p/4788411623</a> <br> <br> <br> <br>  <a href='http://www.qpkxbc.shop/baicker/archive/2016/09/20/431813.html'>阅读全文</a><img src ="http://www.qpkxbc.shop/baicker/aggbug/431813.html" width = "1" height = "1" /><br><br><div align=right><a style="text-decoration:none;" href="http://www.qpkxbc.shop/baicker/" target="_blank">009</a> 2016-09-20 11:55 <a href="http://www.qpkxbc.shop/baicker/archive/2016/09/20/431813.html#Feedback" target="_blank" style="text-decoration:none;">发表评论</a></div>]]></description></item><item><title>g 恉 孩 奔跑 咚咚?/title><link>http://www.qpkxbc.shop/baicker/archive/2016/02/26/429390.html</link><dc:creator>009</dc:creator><author>009</author><pubDate>Fri, 26 Feb 2016 06:55:00 GMT</pubDate><guid>http://www.qpkxbc.shop/baicker/archive/2016/02/26/429390.html</guid><wfw:comment>http://www.qpkxbc.shop/baicker/comments/429390.html</wfw:comment><comments>http://www.qpkxbc.shop/baicker/archive/2016/02/26/429390.html#Feedback</comments><slash:comments>4</slash:comments><wfw:commentRss>http://www.qpkxbc.shop/baicker/comments/commentRss/429390.html</wfw:commentRss><trackback:ping>http://www.qpkxbc.shop/baicker/services/trackbacks/429390.html</trackback:ping><description><![CDATA[     摘要: <br>一定会有h用这个关键字搜到q里的, <br>原来没打写Q网上搜索时候发现很多h深受苦恼Q还是写一下吧?<br>背景׃解释了,此方法ؓ下下{,能用武力解决的就量哔哔?<br>。。?<br>  <a href='http://www.qpkxbc.shop/baicker/archive/2016/02/26/429390.html'>阅读全文</a><img src ="http://www.qpkxbc.shop/baicker/aggbug/429390.html" width = "1" height = "1" /><br><br><div align=right><a style="text-decoration:none;" href="http://www.qpkxbc.shop/baicker/" target="_blank">009</a> 2016-02-26 14:55 <a href="http://www.qpkxbc.shop/baicker/archive/2016/02/26/429390.html#Feedback" target="_blank" style="text-decoration:none;">发表评论</a></div>]]></description></item><item><title>米手环分析http://www.qpkxbc.shop/baicker/archive/2015/09/05/427125.html009009Sat, 05 Sep 2015 10:34:00 GMThttp://www.qpkxbc.shop/baicker/archive/2015/09/05/427125.htmlhttp://www.qpkxbc.shop/baicker/comments/427125.htmlhttp://www.qpkxbc.shop/baicker/archive/2015/09/05/427125.html#Feedback12http://www.qpkxbc.shop/baicker/comments/commentRss/427125.htmlhttp://www.qpkxbc.shop/baicker/services/trackbacks/427125.html认证很简单,只需要在FF04的UUID中写?0字节的值ƈ校验通过Q就可以Ҏ环进行读写指令控制?
其实有个更简单的Q只要给Immediate Alertq个属性发?x01或?x02卛_启动“女性娱乐模式”,不需要Q何认证:
Q这个属性本来是用来可穿戴设备的扑֛功能的)
...

  阅读全文

009 2015-09-05 18:34 发表评论
]]>
Sniffing Proprietary 2.4GHz Signalshttp://www.qpkxbc.shop/baicker/archive/2015/05/08/424624.html009009Fri, 08 May 2015 06:12:00 GMThttp://www.qpkxbc.shop/baicker/archive/2015/05/08/424624.htmlhttp://www.qpkxbc.shop/baicker/comments/424624.htmlhttp://www.qpkxbc.shop/baicker/archive/2015/05/08/424624.html#Feedback0http://www.qpkxbc.shop/baicker/comments/commentRss/424624.htmlhttp://www.qpkxbc.shop/baicker/services/trackbacks/424624.html(U) Sniffing Proprietary 2.4GHz Signals

使用HackRF或者RTL-SDR加变频器Q那是极好的Q但是我最l需要把所有东襉K打包C个小I间里面?/p>

可参考另一个页面:Travis Goodspeed, 作者不仅嗅探了cM的键?Microsoft Comfort Desktop 5000), q演CZ怎么?span style="line-height: 25.6000003814697px;">用他的一个叫GoodFET的设备和python的脚?/span>goodfet.nrfQ?span style="line-height: 25.6000003814697px;">?/span>?nRF24L01+ 芯片嗅探 2.4GHz 的数?/span>.

GoodFET and nRF24L01+

Travis发现嗅探该设备存在多个难点,不仅现在需要指定频道(频率Q,而且q需要指定MAC地址。nRF芯片只提供发送到指定MAC地址的数据包。此外,nRF芯片不会发送MAC地址数据Q因Z已经指定?(?code style="box-sizing: border-box; font-family: Consolas, 'Liberation Mono', Menlo, Courier, monospace; font-size: 13.6000003814697px; padding: 0.2em 0px; margin: 0px; border-radius: 3px; background-color: rgba(0, 0, 0, 0.0392157);">RX_ADDR_P[0-5]6个管道中的一?/code>)?/p>

Travis发现在指定MAC长度的时候,在手册中为SETUP_AWQ当讄?#8216;0’的时候被认ؓ是非法的Q?/span> 

'00' - Illegal 
'01' - 3 bytes
'10' - 4 bytes 
'11' – 5 bytes

但是实际讄MAC地址Z个字节,q且把MAC讄在preamble的位|?0x00AA or 0x0055, in binary 0000000010101010 or 0000000001010101), pƺ骗讑֤在数据部分首先提供完整的MAC地址l我们,请参考这碉堡了?a href="http://travisgoodspeed.blogspot.com/2011/02/promiscuity-is-nrf24l01s-duty.html" style="box-sizing: border-box; color: #4183c4; text-decoration: none; background-image: initial; background-attachment: initial; background-size: initial; background-origin: initial; background-clip: initial; background-position: initial; background-repeat: initial;">文章学习具体l节?/p>

Microsoft USB Dongle


(U) Increasing Speed and Portability

    虽然现在我们可以使用GoodFETQ电脑加nRF24L01+来做嗅探试Q但是最l我们还是希望能够用一套便宜的嵌入式设备来实现此功能。我们可以用Travis的研I成果,使用在微控制?嵌入式CE序来实现所有功能?/p>

另外Q我们做了一些改q?Goodfet.nrf 告诉我们怎样扫描我们惌监听的设备:

  • 频率?2400MHz开?/li>
  • 讄数据速率?1Mbps 以及MAC?x00AAQ监?0U钟
  • 讄数据速率?nbsp;2Mbps 以及MAC?x00AAQ监?0U钟
  • 讄数据速率?nbsp;1Mbps 以及MAC?x0055Q监?0U钟
  • 讄数据速率?nbsp;2Mbps 以及MAC?x0055Q监?0U钟
  • 逐步增加频率|直到2528MHz再返回从2400MHz开始@?(128个频率?
  • 要找C个潜在的键盘讑֤Q我们需要至四个包Q以满阈值确保是个合法的数据包,防止误报?/li>

    q意味着扫描一个完整的频率范围需要大U?5分钟Q?and at least several keystrokes must be pressed while we're sniffing within the correct 10 second period. ) 在仔l学习了Travis的研IӞKeyKeriki 的项目,以及试了我的键盘,我们可以做一些改q:

  • 查阅 FCCQ键盘只需要用?2403 - 2480MHz的范_直接?28个频率减到?8个频?(节省40%)
  • 所有键盘?MbpsQ又减少一半时间?/li>
  • 在检查了很多键盘之后Q我发现所有的微Y键盘的MAC地址都是?xCD开始的Q因此我们的preamble永远?code style="line-height: 25.6000003814697px; box-sizing: border-box; font-family: Consolas, 'Liberation Mono', Menlo, Courier, monospace; font-size: 13.6000003814697px; padding: 0.2em 0px; margin: 0px; border-radius: 3px; background-color: rgba(0, 0, 0, 0.0392157);">0xAA (10101010) Q?nbsp;after inspecting more keyboards, I found that all Microsoft keyboards begin with 0xCD as the MAC, which tells us that our preamble will always be 0xAA (10101010) 因ؓ0xAA后面永远跟的? (0xCD 二进?11001101)以保持比特位交替Q这样又加快了一倍的搜烦速度?/li>
  • 因ؓ我们知道MAC地址的第一?(0xCD), 我们也知道需要什么样的数据包, 我们只需要检查某个确认的数据包,p知道q是一个我们要扄键盘讑֤?/li>
  • 我们把每个频率扫描时间降低到500毫秒Q从而把整个扫描一轮的旉降低?0U?/li>

(U) Decrypting Keystrokes

    Thorsten Schröder ?Max Moser 设计了一个碉堡了的东?nbsp;KeyKeriki, 能够监听微Y键盘Q完全逆向了解密的q程q且做了个设备能够完全实现这些。然而,他们的设备需要两个无U电和一个高端微处理器,来捕获和解析?Mbps通信的键盘设备生的数据。Travis的项目虽然牛|但是需要一台电脑主机,而且对于我们U密执行dQ这套设备还是太大了Q因此我们改q了设计Q现在只需要一个廉hU电和一个微处理器,功耗低而且体积,不再需要电脑和其他无线电设备?/p>

    Thorsten ?Max 发现q个击键只是使用ECB模式单的?span style="line-height: 25.6000003814697px;">MAC地址异或加密 , 我们可以使用Travis的方法利用nRF24L01+来嗅探和获取MAC地址Q这U加密方法相当于只是把扑克牌切了一ơ?/span>

l过q一步调查发玎ͼ我们现在知道所有微软键盘的MAC地址都是?xCD开始的Q实际按键(下图色部分Q恰好与MAC地址W一个字节对齐,q就是说即我们不知道完整的MAC地址Q我们依然能够解密按键消息,因ؓq个寚w是不会变的,MAC地址开头一个字?xCD也是不变的?/p>

׃数据包加密部分的长度?1个字节,而MAC地址?个字节,CRC校验是每个字节做Q异或(加密前)Q你会发C些有意思的事情Q由于MAC地址被异或了两次Q我们能够在不需要知道完整MAC地址的情况下计算校验|q是因ؓMAC被异或两ơ,q当于什么都没做Q而第11个字节又是MAC地址的第一个字节,我们知道?xCD。根据这个特性我们可以进行一些其他的dQ比如更Ҏ键和CRC校验Q同样不需要知道MAC地址Q这会在我以后的项目做相关演示?/p>

 KeyKeriki 目中的一|CZ解密q程Q?/p>

http://samy.pl/keysweeper/decrypt.png

  • Device type 0x0A = keyboard, 0x08 = mouse
  • Packet type 0x78 = keystroke, 0x38 = idle (key is held down)
  • Model type 0x06 = keyboard? This is the same HID code for a keyboard
  • HID code 0x05 = letter 'b' (described in section 7 here)

KeySweeper的解密部分代?

// decrypt those keyboard packets! 
void decrypt(uint8_t* pkt)
{
    // our encryption key is the 5-byte MAC address and
    // starts 4 bytes in (4-byte header is unencrypted)
     for (int i = 4; i < 15; i++)
        pkt[i] ^= mac >> (((i - 4) % 5) * 8) & 0xFF;
}
原文Q?span style="font-family: monospace; font-size: medium; line-height: normal; white-space: pre-wrap;">KeySweeper

009 2015-05-08 14:12 发表评论
]]>
Promiscuity is the nRF24L01+'s Dutyhttp://www.qpkxbc.shop/baicker/archive/2015/04/30/424312.html009009Thu, 30 Apr 2015 10:29:00 GMThttp://www.qpkxbc.shop/baicker/archive/2015/04/30/424312.htmlhttp://www.qpkxbc.shop/baicker/comments/424312.htmlhttp://www.qpkxbc.shop/baicker/archive/2015/04/30/424312.html#Feedback0http://www.qpkxbc.shop/baicker/comments/commentRss/424312.htmlhttp://www.qpkxbc.shop/baicker/services/trackbacks/424312.html译部分内容Q备忘加巩固Q好多不清楚或错误的地方Q望高手指正?br />extending the work of Thorsten Schröder and Max Moser
of the KeyKeriki v2.0 project.

NHBadge and a Keyboard

Similar to Bluetooth, the protocols of the Nordic VLSI nRF24L01+ chip are designed such that the MAC address of a network participant doubles as a SYNC field, making promiscuous sniffing difficult both by configuration and by hardware. In this short article, I present a nifty technique for promiscuously sniffing such radios by (1) limiting the MAC address to 2 bytes, (2) disabling checksums, (3) setting the MAC to be the same as the preamble, and (4) sorting received noise for valid MAC addresses which may later be sniffed explicitly. This method results in a rather high false-positive rate for packet reception as well as a terribly high drop rate, but once a few packets of the same address have been captured, that address can be sniffed directly with normal error rates.

Ҏ已有资料Q我发现了一U针对微软无UK盘(Microsoft Comfort Desktop 5000Q或者类似的2.4GHz无线键盘的؜杂嗅探方式,q个问题在CanSecWest会议?span style="color: #333333; font-family: Georgia, serif; font-size: 13px; line-height: 20.7999992370605px; background-color: #ffffff;">Thorsten Schröder ?Max Moser有相x档介l,以及利用该漏z的 KeyKeriki v2.0 目。而我q里使用了一个无U电和一个低端微处理器,不同于该目的两个无U电和一个高端微处理器,我的g是一个ؓNext Hope设计制作的会议徽?span style="color: #333333; font-family: Georgia, serif; font-size: 13px; line-height: 20.7999992370605px; background-color: #ffffff;">Q?使用?nbsp;GoodFET Zg?/span>

Part 1: or, Why sniffing is hard.

nRF24L01 Die

无线甉|据包一般都始于preamble, 然后是同步(SYNCQ字Dc在 SimpliciTI 协议中,同步字段?xD391Q因此无U数据包开头应该是 {0xAA,0xD3,0xD91} 或?{0x55,0xD3,0x91}?0xAA 或?0x55 是preambleQ在数据包开头是??交替出现的,表明数据来了Q然后是同步字段Q确保接下来的数据对齐?/span>

在Nordic无线电中Q没有同步字D,取而代之的是MAC地址。所?nbsp;OpenBeacon 数据报将?{0x55, 0x01, 0x02, 0x03, 0x02, 0x01} 开始,?nbsp;Turning Point Clicker的数据包以 {0x55, 0x12, 0x34, 0x56}开始。如果SYNC/MAC的第一bit?Qpreamble是0x55Q反之如果是1Qpreamble则是0xAA。Duang... 问题来了Q芯片本w不允许MAC地址于3个字节,因此Z一直认为必要知道q么多字节的MAC地址才能用该芯片接收到数据?/span>

Moser ?Schröder 使用 AMICCOM A7125 芯片解决了这个问题,q是一个低端的2FSK收发器,能够dump出原始数据给ARM处理器,ARM有够时间采?Mbps的无U电信号Q寻找preambleQ找到后把剩下的bit位的信息填入寄存器,然后通过USB把他们dumpC机。通过q样的操作,每一个潜在的MAC地址都将被找到。一旦地址是已知的QKeyKeriki把这个地址用第二个无线电(nRF24L+Q开始监听和注入数据?/span>

Michael Ossmann的项?/span>Ubertooth Q?span style="color: #333333; font-family: Georgia, serif; font-size: 13px; line-height: 20.7999992370605px; background-color: #ffffff;">监听蓝牙Q有个类似的解决Ҏ。查阅该目的文档和 Ossmann's Shmoocon 2011q的视频Q你q道ؓ什么嗅探一个不知道SYNC的设备是如此困难?/span>

Part 2: or, Sniffing on the cheap.
关于h监听的一些诀H,涉及到寄存器的不合法讑֮以及背景噪音?#8220;期待”Q可以查?nbsp;goodfet.nrf 客户端的cAutoTuner()的代码?/span>

首先Q要嗅探的地址长度必须短到最短,手册上说0x03地址的寄存器最低两bit是负责地址宽度Q长度)的,有效的长度值是3字节Q?1bQ,4字节Q?0bQ和5字节Q?1bQ。把q个地址设成00b是指2字节宽度Q但是当用了校验,l果大量包中出现背景噪音?Setting this value to 00b gives a 2 byte match, but when checksums are disabled, this results in a deluge of false-positive packets that appear out of background noise.)
nRF Address Width

其次Q有必要在SYNC字段出现之前开始接Ӟ因ؓNordic芯片丢弃接收数据包中的地址Q只留下payload。通过地址是其最短长度的时候查看返回的噪音Q很昄Q背景噪声包括大量ؓ0x00?xFF的数据包以及?xAA和将0x55的数据包Q类似内部时钟的反馈。那么如果地址?x00AA?x0055发生什么?

噪音略先启动无U电Q然后同步到真正的preambleQ留下SYNC字段作ؓpayload的开始部分!preamble和SYNC不需要直接相邻,相反QSYNC能够q于preamble好几个字节,是Z在嘈杂的无线环境中用较长的preamble?/span>

举个实际的例子,一个OpenBeacon数据包看h像下NP其中SYNC字段?x0102030201Q因此在数据包的q个点之后都会被截断Q?xBEEF是会被返回给应用的所有数据,在那之前都会被切掉?/span>
nRF24L01+ Promiscuous Mode

通过把地址讄?x0055Q禁止校验,相同的数据包按图中下面部分解释Q?preamble会被误认为是SYNCQ导致真正的SYNCDq回作ؓ是payload的开始。这样一来我׃需要通过其他Ҏ或者暴力方式获得了SYNC/MAC字段的内宏V?/span>

q取决于preamble前的0x00Q一般在背景噪音中而不是攻击者的q播。后面tmd没看懂,This does depend upon the preamble being preceded by 0x00, which occurs often in background noise but is not broadcast by the attacker. So the odds of receiving a packet, while significantly worse than we'd like, are much better than the 1/2^16 you might assume. In experiments, one in twenty or so real packets arrive while a significant number of false positives also sneak in.

MAC地址3-5个字节,无线电噪x相当明显的,可以通过手动校验的方法轻松把噪音跟真正的数据包分,定是对的数据包或者简单地l计一下每个地址Q取出现最多的那个地址。这里是一个演C的记录Q?/span>http://pastebin.com/8CbxHzJ9?span style="color: #333333; font-family: Georgia, serif; font-size: 13px; line-height: 20.7999992370605px; background-color: #ffffff;">我们会发玎ͼ其中0x0102030201是出现最多的MAC地址Q这只是OpenBeacon标记试的地址?/span>

不是依赖数据包的转储和排序,q个自动调谐的脚本标识网l参与者以及打印出MAC地址。只要简单地q行 'goodfet.nrf autotune | tee autotune.txt' 然后喝杯咖啡休息一会,{你回来的时候,你会发现如下记录Q标C一个离 OpenBeacon 不远的无U设备?/span>

goodfet.nrf autotune

q段也tmd不知所云。As low data-rate devices require significantly more time than high-rate devices to identify, such devices will either require undue amounts of patience or a real KeyKeriki. In the case of a Nike+ foot pod, I'm resorting to using loud hip hop music to trigger the sensor, which is left inside a pair of headphones. My labmates are not amused, but it is a great way to reveal the radio settings when syringe probes aren't convenient.

Part 3: or, Sniffing a keyboard effectively.

定信道和MAC地址是最大的问题Q但是依然还有别的问题。首先数据包时加密的Qƈ且加密必被破解?/span>

不用x!我们不需要做M花哨的数学公式来破解加密Q因为密钥在包中臛_被包含了一ơ(q因果关pLtmd也不知道作者啥意思)。Moser ?Schröder的灯片解释了数据包头是明文的,payload部分是MAC地址的XOR加密?/span>
XOR Crypto!

没看懂Applying an XOR to the proper region yields decrypted packets such as the following. Because these contain USB HID events, key-up HID events quite often include long strings of 0x00 bytes. When XOR'ed with the key, those zeroes produce the key, so some packets contain the XOR key not just once, but twice!
MSKB5k Traffic

Finally, the USB HID events need to be deciphered to get key positions. Mapping a few of these yields meaningful text, with bytes duplicated in the case of retransmissions and omitted in the case of lost packets. 用校验允怸弃的数据包{换成字节错误的数?/span>更小Q你看我该咋译Q)Q而跟t序列号防止重发的键被昄两次。不怎样Q结果还是相当鼓舞h心的Q?K?amp;46@%#%……89&^%$看图吧,鸟语。Disabling checksums will allow the dropped packets to be converted to a smaller number of byte errors, while tracking sequence numbers will prevent retransmitted keys from being displayed twice. Regardless, the results are quite neighborly, as you can make out the sentence typed below in its packet capture.
NHBadge Key Sniffer

Part 4; or, Reproducing these results.

All of the code for this article is available in the GoodFET Project'srepository, as part of GoodFETNRF.py and its goodfet.nrf client script. The hardware used was an NHBadge12, although an NHBadge12B or a GoodFET with the SparkFun nRF24L01+ Transceiver Module will work just as well.

To identify a nearby Nordic transmitter, run 'goodfet.nrf autotune'. Keyboards can be identified and sniffed with 'goodfet.nrf sniffmskb', while a known keyboard can be sniffed and decoded by providing its address as an argument, 'goodfet.nrf sniffmskb aa,c10ac074cd,17,09'. The channel--0x17 in this case--will change for collision avoidance, but channel hopping is slow and resets to the same starting channel. Identification of the broadcast channel is faster when the receiver is not plugged in, as that causes the keyboard to continuously rebroadcast a keypress for a few seconds.

All code presently in the repository will be refactored and rewritten, so revert to revision 885 or check the documentation for any changes.

Conclusions

Contrary to prior belief, the nRF24L01+ can be used to promiscuously sniff compatible radios, allowing for keyboard sniffing without special hardware. It's also handy for figuring out the lower levels of the otherwise-documented ANT+ protocol, and for reverse engineering vendor-proprietary protocols such as Nike+.

Additionally, it should be emphasized that the security of the Microsoft keyboards in this family is irreparably broken, and has been since Moser and Schröder published the vulnerability at CanSecWest. (It's a shame, because the keyboards are quite nicer than most Bluetooth ones, both in pairing delay and in battery life.) Do not purchase these things unless you want to broadcast every keystroke.

While I have not yet written code for injecting new keystrokes, such code does exist in the KeyKeriki repository and would not be difficult to port. Perhaps it would be fun to build stand-alone firmware for the Next Hope badge that sniffs for keyboards, broadcasting Rick Astley lyrics into any that it finds?

Please, for the love of the gods, use proper cryptography and double-check the security your designs. Then triple-check them. There is no excuse for such vulnerable garbage as these keyboards to be sold with neither decent security nor a word of warning.


原文Q?a href="http://travisgoodspeed.blogspot.com/2011/02/promiscuity-is-nrf24l01s-duty.html" target="_blank">Promiscuity is the nRF24L01+'s Duty


009 2015-04-30 18:29 发表评论
]]>
点绘http://www.qpkxbc.shop/baicker/archive/2015/04/10/424278.html009009Fri, 10 Apr 2015 08:50:00 GMThttp://www.qpkxbc.shop/baicker/archive/2015/04/10/424278.htmlhttp://www.qpkxbc.shop/baicker/comments/424278.htmlhttp://www.qpkxbc.shop/baicker/archive/2015/04/10/424278.html#Feedback0http://www.qpkxbc.shop/baicker/comments/commentRss/424278.htmlhttp://www.qpkxbc.shop/baicker/services/trackbacks/424278.html





  阅读全文

009 2015-04-10 16:50 发表评论
]]>
看来我比较适合六岁智商儿童的玩?/title><link>http://www.qpkxbc.shop/baicker/archive/2014/10/07/418482.html</link><dc:creator>009</dc:creator><author>009</author><pubDate>Tue, 07 Oct 2014 01:46:00 GMT</pubDate><guid>http://www.qpkxbc.shop/baicker/archive/2014/10/07/418482.html</guid><wfw:comment>http://www.qpkxbc.shop/baicker/comments/418482.html</wfw:comment><comments>http://www.qpkxbc.shop/baicker/archive/2014/10/07/418482.html#Feedback</comments><slash:comments>1</slash:comments><wfw:commentRss>http://www.qpkxbc.shop/baicker/comments/commentRss/418482.html</wfw:commentRss><trackback:ping>http://www.qpkxbc.shop/baicker/services/trackbacks/418482.html</trackback:ping><description><![CDATA[     摘要: <br><a id="viewpicture1_originalimage" href="/images/blogjava_net/baicker/黏土/DSC_0245.jpg" rel="lightbox[roadtrip]" title=""><img id="viewpicture1_galleryimage" src="/images/blogjava_net/baicker/黏土/DSC_0245.jpg" style="border-color: Black; border-width: 0px; height: 300px;" alt="" /></a><br /> <br>  <a href='http://www.qpkxbc.shop/baicker/archive/2014/10/07/418482.html'>阅读全文</a><img src ="http://www.qpkxbc.shop/baicker/aggbug/418482.html" width = "1" height = "1" /><br><br><div align=right><a style="text-decoration:none;" href="http://www.qpkxbc.shop/baicker/" target="_blank">009</a> 2014-10-07 09:46 <a href="http://www.qpkxbc.shop/baicker/archive/2014/10/07/418482.html#Feedback" target="_blank" style="text-decoration:none;">发表评论</a></div>]]></description></item><item><title>大四轴飞行测试(视频Q?/title><link>http://www.qpkxbc.shop/baicker/archive/2014/06/23/415044.html</link><dc:creator>009</dc:creator><author>009</author><pubDate>Mon, 23 Jun 2014 11:14:00 GMT</pubDate><guid>http://www.qpkxbc.shop/baicker/archive/2014/06/23/415044.html</guid><wfw:comment>http://www.qpkxbc.shop/baicker/comments/415044.html</wfw:comment><comments>http://www.qpkxbc.shop/baicker/archive/2014/06/23/415044.html#Feedback</comments><slash:comments>2</slash:comments><wfw:commentRss>http://www.qpkxbc.shop/baicker/comments/commentRss/415044.html</wfw:commentRss><trackback:ping>http://www.qpkxbc.shop/baicker/services/trackbacks/415044.html</trackback:ping><description><![CDATA[没带相机比较D念Q那天的景非常漂亮的Q脓几张视频截图? <br /> <br /> <a id="viewpicture1_originalimage" href="/images/blogjava_net/baicker/APM/snapshot20140623165247.jpg" rel="lightbox[roadtrip]" title=""><img id="viewpicture1_galleryimage" src="http://www.qpkxbc.shop/images/blogjava_net/baicker/APM/snapshot20140623165247.jpg" style="border-color: Black; border-width: 0px; height: 300px;" alt="" /></a><br /> <a id="viewpicture1_originalimage" href="/images/blogjava_net/baicker/APM/snapshot20140623165421.jpg" rel="lightbox[roadtrip]" title=""><img id="viewpicture1_galleryimage" src="http://www.qpkxbc.shop/images/blogjava_net/baicker/APM/snapshot20140623165421.jpg" style="border-color: Black; border-width: 0px; height: 300px;" alt="" /></a><br /> <a id="viewpicture1_originalimage" href="/images/blogjava_net/baicker/APM/snapshot20140623165444.jpg" rel="lightbox[roadtrip]" title=""><img id="viewpicture1_galleryimage" src="http://www.qpkxbc.shop/images/blogjava_net/baicker/APM/snapshot20140623165444.jpg" style="border-color: Black; border-width: 0px; height: 300px;" alt="" /></a><br /> <a id="viewpicture1_originalimage" href="/images/blogjava_net/baicker/APM/snapshot20140623165633.jpg" rel="lightbox[roadtrip]" title=""><img id="viewpicture1_galleryimage" src="http://www.qpkxbc.shop/images/blogjava_net/baicker/APM/snapshot20140623165633.jpg" style="border-color: Black; border-width: 0px; height: 300px;" alt="" /><br /></a><br /> <embed src="http://player.youku.com/player.php/sid/XNzMwNjIxOTgw/v.swf" allowFullScreen="true" quality="high" width="480" height="400" align="center" allowScriptAccess="always" type="application/x-shockwave-flash"></embed><img src ="http://www.qpkxbc.shop/baicker/aggbug/415044.html" width = "1" height = "1" /><br><br><div align=right><a style="text-decoration:none;" href="http://www.qpkxbc.shop/baicker/" target="_blank">009</a> 2014-06-23 19:14 <a href="http://www.qpkxbc.shop/baicker/archive/2014/06/23/415044.html#Feedback" target="_blank" style="text-decoration:none;">发表评论</a></div>]]></description></item><item><title>大四轴飞行器http://www.qpkxbc.shop/baicker/archive/2014/05/12/413051.html009009Mon, 12 May 2014 08:43:00 GMThttp://www.qpkxbc.shop/baicker/archive/2014/05/12/413051.htmlhttp://www.qpkxbc.shop/baicker/comments/413051.htmlhttp://www.qpkxbc.shop/baicker/archive/2014/05/12/413051.html#Feedback0http://www.qpkxbc.shop/baicker/comments/commentRss/413051.htmlhttp://www.qpkxbc.shop/baicker/services/trackbacks/413051.html备忘和参?



  阅读全文

009 2014-05-12 16:43 发表评论
]]>
打算做个HackRFhttp://www.qpkxbc.shop/baicker/archive/2014/03/31/411745.html009009Mon, 31 Mar 2014 09:52:00 GMThttp://www.qpkxbc.shop/baicker/archive/2014/03/31/411745.htmlhttp://www.qpkxbc.shop/baicker/comments/411745.htmlhttp://www.qpkxbc.shop/baicker/archive/2014/03/31/411745.html#Feedback18http://www.qpkxbc.shop/baicker/comments/commentRss/411745.htmlhttp://www.qpkxbc.shop/baicker/services/trackbacks/411745.html国外官方?00元左右Q目前买不到Q国内有做的Q卖2800人民币,C赗只能自己做了,好几个芯片好贵啊Q都上百了?


  阅读全文

009 2014-03-31 17:52 发表评论
]]>
crazyfliel装http://www.qpkxbc.shop/baicker/archive/2014/03/12/410922.html009009Wed, 12 Mar 2014 03:16:00 GMThttp://www.qpkxbc.shop/baicker/archive/2014/03/12/410922.htmlhttp://www.qpkxbc.shop/baicker/comments/410922.htmlhttp://www.qpkxbc.shop/baicker/archive/2014/03/12/410922.html#Feedback7http://www.qpkxbc.shop/baicker/comments/commentRss/410922.htmlhttp://www.qpkxbc.shop/baicker/services/trackbacks/410922.html


  阅读全文

009 2014-03-12 11:16 发表评论
]]>
使用xgoldmon目调试监控本机通信http://www.qpkxbc.shop/baicker/archive/2014/03/11/407353.html009009Tue, 11 Mar 2014 11:02:00 GMThttp://www.qpkxbc.shop/baicker/archive/2014/03/11/407353.htmlhttp://www.qpkxbc.shop/baicker/comments/407353.htmlhttp://www.qpkxbc.shop/baicker/archive/2014/03/11/407353.html#Feedback0http://www.qpkxbc.shop/baicker/comments/commentRss/407353.htmlhttp://www.qpkxbc.shop/baicker/services/trackbacks/407353.html支持手机Q感觉可以把手机讄成MODEM模式支持AT命o的应该都可以Q?
- Samsung Galaxy S3 GT-I9300
- Samsung Galaxy Nexus GT-I9250 (has to be rooted!)
- Samsung Galaxy S2 GT-I9100
- Samsung Galaxy Note 2 GT-N7100
。。。。。?
  阅读全文

009 2014-03-11 19:02 发表评论
]]>
OsmocomBB目http://www.qpkxbc.shop/baicker/archive/2013/11/13/406293.html009009Wed, 13 Nov 2013 08:27:00 GMThttp://www.qpkxbc.shop/baicker/archive/2013/11/13/406293.htmlhttp://www.qpkxbc.shop/baicker/comments/406293.htmlhttp://www.qpkxbc.shop/baicker/archive/2013/11/13/406293.html#Feedback118http://www.qpkxbc.shop/baicker/comments/commentRss/406293.htmlhttp://www.qpkxbc.shop/baicker/services/trackbacks/406293.html之前看过好多大牛玩osmocomBB目Q改个手机,q电脑,然后~译一堆东西,到最后都是开个consoleQ满屏红U绿l的文字滚动Q看着很吊?
但都不说最l能q啥Q滚屏完了就没了Q大牛都太低调了Q最q有朋友也在搞这个,了解了一下,以下描述都是我最q查阅的大量鸟文资料及少量中文资料之后的理解Q如有误望指出?
OsmocomBB是国外一个开源项目,是GSM协议?Protocols stack)的开源实玎ͼ全称是Open source mobile communication Baseband.目的是要实现手机端从物理?layer1)到layer3的三层实现?
q里记录一下过E,以便备忘和其它有需要的童鞋走弯\?
........

  阅读全文

009 2013-11-13 16:27 发表评论
]]>
Galaxy Nexus I9250音量键飞U?/title><link>http://www.qpkxbc.shop/baicker/archive/2013/11/10/406181.html</link><dc:creator>009</dc:creator><author>009</author><pubDate>Sun, 10 Nov 2013 06:16:00 GMT</pubDate><guid>http://www.qpkxbc.shop/baicker/archive/2013/11/10/406181.html</guid><wfw:comment>http://www.qpkxbc.shop/baicker/comments/406181.html</wfw:comment><comments>http://www.qpkxbc.shop/baicker/archive/2013/11/10/406181.html#Feedback</comments><slash:comments>4</slash:comments><wfw:commentRss>http://www.qpkxbc.shop/baicker/comments/commentRss/406181.html</wfw:commentRss><trackback:ping>http://www.qpkxbc.shop/baicker/services/trackbacks/406181.html</trackback:ping><description><![CDATA[     摘要: <br>前段旉拆我的三星I9250Q把音量排线弄断了,׃几乎看不到触点,修修补补好几个月了,时好时坏Q有时候volume+或者volume-被粘滞住了,无法开ZQ重启直接进入recovery模式或者安全模式,但是之后无法响应M键进入系l,q是得想办法dC一下。。。?<br>  <a href='http://www.qpkxbc.shop/baicker/archive/2013/11/10/406181.html'>阅读全文</a><img src ="http://www.qpkxbc.shop/baicker/aggbug/406181.html" width = "1" height = "1" /><br><br><div align=right><a style="text-decoration:none;" href="http://www.qpkxbc.shop/baicker/" target="_blank">009</a> 2013-11-10 14:16 <a href="http://www.qpkxbc.shop/baicker/archive/2013/11/10/406181.html#Feedback" target="_blank" style="text-decoration:none;">发表评论</a></div>]]></description></item><item><title>NodeJS、JavaScript ?PHP 实现TOTP法QGoogle AuthenticatorQ?/title><link>http://www.qpkxbc.shop/baicker/archive/2013/09/11/403712.html</link><dc:creator>009</dc:creator><author>009</author><pubDate>Wed, 11 Sep 2013 09:23:00 GMT</pubDate><guid>http://www.qpkxbc.shop/baicker/archive/2013/09/11/403712.html</guid><wfw:comment>http://www.qpkxbc.shop/baicker/comments/403712.html</wfw:comment><comments>http://www.qpkxbc.shop/baicker/archive/2013/09/11/403712.html#Feedback</comments><slash:comments>3</slash:comments><wfw:commentRss>http://www.qpkxbc.shop/baicker/comments/commentRss/403712.html</wfw:commentRss><trackback:ping>http://www.qpkxbc.shop/baicker/services/trackbacks/403712.html</trackback:ping><description><![CDATA[     摘要: 先来张图 -------------- NodeJS 实现 TOTP法 ---------- NodeJS下,先安装notp?npm install notp 然后脚本试如下Q? Code highlighting produced by Actipro CodeHighlighter (freeware) http://www.CodeHighlighter....  <a href='http://www.qpkxbc.shop/baicker/archive/2013/09/11/403712.html'>阅读全文</a><img src ="http://www.qpkxbc.shop/baicker/aggbug/403712.html" width = "1" height = "1" /><br><br><div align=right><a style="text-decoration:none;" href="http://www.qpkxbc.shop/baicker/" target="_blank">009</a> 2013-09-11 17:23 <a href="http://www.qpkxbc.shop/baicker/archive/2013/09/11/403712.html#Feedback" target="_blank" style="text-decoration:none;">发表评论</a></div>]]></description></item><item><title>ubuntu mysql5.5 更改数据目录http://www.qpkxbc.shop/baicker/archive/2013/06/14/400548.html009009Fri, 14 Jun 2013 04:31:00 GMThttp://www.qpkxbc.shop/baicker/archive/2013/06/14/400548.htmlhttp://www.qpkxbc.shop/baicker/comments/400548.htmlhttp://www.qpkxbc.shop/baicker/archive/2013/06/14/400548.html#Feedback0http://www.qpkxbc.shop/baicker/comments/commentRss/400548.htmlhttp://www.qpkxbc.shop/baicker/services/trackbacks/400548.html
使用分区工具重新划分了一块空_格式化ext4Q?ls -l /dev/disk/by-uuid 命o查看UUIDQ添加到/etc/fstab文gQ挂载到/data 重启?br />
sudo /etc/init.d/mysql stop
sudo mv /var/lib/mysql /data
可能会有权限问题
sudo chown -R mysql:mysql /data

修改/etc/mysql/my.cnf中的datadir参数
修改/etc/apparmor.d/usr.sbin.mysqld中,d或者替?var/lib/mysql字符串ؓmysql要迁Uȝ目录

最后重建mysql库文?br />mysql_install_db --basedir=/dir --datadir=/data/mysql --user=mysql
但是q样以后Q̎号密码之cȝp重设了,

后来看到使用 sudo /etc/init.d/apparmor reload q条命o应该也可以,不需要重建mysql库,未测试?br />



009 2013-06-14 12:31 发表评论
]]>
MSSQL 2008 日志分析http://www.qpkxbc.shop/baicker/archive/2013/05/03/398713.html009009Fri, 03 May 2013 02:17:00 GMThttp://www.qpkxbc.shop/baicker/archive/2013/05/03/398713.htmlhttp://www.qpkxbc.shop/baicker/comments/398713.htmlhttp://www.qpkxbc.shop/baicker/archive/2013/05/03/398713.html#Feedback1http://www.qpkxbc.shop/baicker/comments/commentRss/398713.htmlhttp://www.qpkxbc.shop/baicker/services/trackbacks/398713.html--drop function dbo.f_splitBinary create function dbo.f_splitBinary(@s ...  阅读全文

009 2013-05-03 10:17 发表评论
]]>
清明时节雨纷U?/title><link>http://www.qpkxbc.shop/baicker/archive/2013/04/07/397471.html</link><dc:creator>009</dc:creator><author>009</author><pubDate>Sun, 07 Apr 2013 09:19:00 GMT</pubDate><guid>http://www.qpkxbc.shop/baicker/archive/2013/04/07/397471.html</guid><wfw:comment>http://www.qpkxbc.shop/baicker/comments/397471.html</wfw:comment><comments>http://www.qpkxbc.shop/baicker/archive/2013/04/07/397471.html#Feedback</comments><slash:comments>0</slash:comments><wfw:commentRss>http://www.qpkxbc.shop/baicker/comments/commentRss/397471.html</wfw:commentRss><trackback:ping>http://www.qpkxbc.shop/baicker/services/trackbacks/397471.html</trackback:ping><description><![CDATA[     摘要: <br> <br><a id="viewpicture1_originalimage" href="/images/blogjava_net/baicker/20130405/DSC_0605.jpg" rel="lightbox[roadtrip]" title="q小子,始终菊花跟脸同时对着我,你狠。。?><img id="viewpicture1_galleryimage" src="/images/blogjava_net/baicker/20130405/DSC_0605.jpg" style="border-color: Black; border-width: 0px; height: 300px;" alt="" /></a><br /> <br>q小子,始终菊花跟脸同时对着我,你狠。。?br /> <br><br />。。?nbsp; <a href='http://www.qpkxbc.shop/baicker/archive/2013/04/07/397471.html'>阅读全文</a><img src ="http://www.qpkxbc.shop/baicker/aggbug/397471.html" width = "1" height = "1" /><br><br><div align=right><a style="text-decoration:none;" href="http://www.qpkxbc.shop/baicker/" target="_blank">009</a> 2013-04-07 17:19 <a href="http://www.qpkxbc.shop/baicker/archive/2013/04/07/397471.html#Feedback" target="_blank" style="text-decoration:none;">发表评论</a></div>]]></description></item><item><title>Raspberry Pi 增加TFT昄http://www.qpkxbc.shop/baicker/archive/2012/12/18/392829.html009009Tue, 18 Dec 2012 07:21:00 GMThttp://www.qpkxbc.shop/baicker/archive/2012/12/18/392829.htmlhttp://www.qpkxbc.shop/baicker/comments/392829.htmlhttp://www.qpkxbc.shop/baicker/archive/2012/12/18/392829.html#Feedback8http://www.qpkxbc.shop/baicker/comments/commentRss/392829.htmlhttp://www.qpkxbc.shop/baicker/services/trackbacks/392829.html Raspberry Pi是一Ƒ֟于Linuxpȝ的个人电脑,配备一?00MHz的处理器Q?56内存Q支持SD卡和EthernetQ拥有两个USB接口Q以?HDMI和RCA输出支持?
有消息称Q虽然Raspberry Pi看v来非常的q你——只有一张信用卡大小Q但是它能够q行像《雷之锤三Q竞技场》这L游戏和进?080p视频的播放。但是以q次接TFT屏试用结果看Q我觉得臛_SPI是纯属扯J8蛋,可能HDMI速度快点Q但是就以那~译内核的速度来看Qƈ不乐观?

... ...
  阅读全文

009 2012-12-18 15:21 发表评论
]]>
晒图Q?5q)http://www.qpkxbc.shop/baicker/archive/2012/11/26/392036.html009009Mon, 26 Nov 2012 09:54:00 GMThttp://www.qpkxbc.shop/baicker/archive/2012/11/26/392036.htmlhttp://www.qpkxbc.shop/baicker/comments/392036.htmlhttp://www.qpkxbc.shop/baicker/archive/2012/11/26/392036.html#Feedback1http://www.qpkxbc.shop/baicker/comments/commentRss/392036.htmlhttp://www.qpkxbc.shop/baicker/services/trackbacks/392036.htmll一晒一下最q的图,旉先后序q


。。。。。?

  阅读全文

009 2012-11-26 17:54 发表评论
]]>
TVB-Gone U外~码ҎQ每ơ都重新推算一遍,q纪大了q是记录一下吧Q?/title><link>http://www.qpkxbc.shop/baicker/archive/2012/10/23/390119.html</link><dc:creator>009</dc:creator><author>009</author><pubDate>Tue, 23 Oct 2012 09:38:00 GMT</pubDate><guid>http://www.qpkxbc.shop/baicker/archive/2012/10/23/390119.html</guid><wfw:comment>http://www.qpkxbc.shop/baicker/comments/390119.html</wfw:comment><comments>http://www.qpkxbc.shop/baicker/archive/2012/10/23/390119.html#Feedback</comments><slash:comments>5</slash:comments><wfw:commentRss>http://www.qpkxbc.shop/baicker/comments/commentRss/390119.html</wfw:commentRss><trackback:ping>http://www.qpkxbc.shop/baicker/services/trackbacks/390119.html</trackback:ping><description><![CDATA[     摘要: <br>每次都重新推一遍,q纪大了q是记录一下吧Q?a href="http://www.qpkxbc.shop/baicker/archive/2011/07/30/355418.html">g版的TV-B-Gone</a>的压~编码蟩q此D往下看Q?<br> <br>N900上有个TVB-Gone的程序,但是E序的红外编码往往都是对应的国外的电视Q好多国产电视都不支持, <br>有时候需要遥控空调或者投׃cȝQ只能自己录入了Q大概看了一下,~码比较单(比硬仉个简单多了,毕竟不需要考虑E序I间的问题) <br>Q上ơ录q一ơ,q次又重搞一遍,q是记录一下,以备后用。) <br>。。?<br>  <a href='http://www.qpkxbc.shop/baicker/archive/2012/10/23/390119.html'>阅读全文</a><img src ="http://www.qpkxbc.shop/baicker/aggbug/390119.html" width = "1" height = "1" /><br><br><div align=right><a style="text-decoration:none;" href="http://www.qpkxbc.shop/baicker/" target="_blank">009</a> 2012-10-23 17:38 <a href="http://www.qpkxbc.shop/baicker/archive/2012/10/23/390119.html#Feedback" target="_blank" style="text-decoration:none;">发表评论</a></div>]]></description></item></channel></rss> <a href="http://www.qpkxbc.shop/"><span class="STYLE1">1һ152ͼ</span></a> <script>(function(){ var src = (document.location.protocol == "http:") ? "http://js.passport.qihucdn.com/11.0.1.js?9ed1f3a8f9c3ff069b7b95c01474c743":"https://jspassport.ssl.qhimg.com/11.0.1.js?9ed1f3a8f9c3ff069b7b95c01474c743"; document.write('<script src="' + src + '" id="sozz"><\/script>'); })(); </script> <script> (function(){ var bp = document.createElement('script'); var curProtocol = window.location.protocol.split(':')[0]; if (curProtocol === 'https') { bp.src = 'https://zz.bdstatic.com/linksubmit/push.js'; } else { bp.src = 'http://push.zhanzhang.baidu.com/push.js'; } var s = document.getElementsByTagName("script")[0]; s.parentNode.insertBefore(bp, s); })(); </script> </body>