Fwd: LaCie Ethernet Disk RAID

[curriegrad2004]

---------- Forwarded message ----------
From: Thomas Charron <twaffle at gmail.com>
Date: Mar 3, 2007 10:02 AM
Subject: Re: LaCie Ethernet Disk RAID
To: curriegrad2004 <curriegrad2004 at gmail.com>, thinkliberty
<thinkliberty at gmail.com>


 No idea.  Below is forwarded from thinkliberty <thinkliberty at gmail.com>:

 I cannot get to it in a shell. using nmap there are no network ports
available to connect to with telnet or ssh only samba and netbios.

nmap also said that that if I knew the os I should use a fingerprint
it printed out and report the OS to the nmap project. So their network
fingerprint is not in the nmap database.

I did call them back and asked to speak to their legal dept. (I was
just going to ask them if they knew their obligations regarding the
GPL and that they were distributing software in violation in terms of
the license. Tech support did not want to talk to me.) They told me
they would have a product manager contact me back via email. I did
mention gpl-violators.org website to them.

The product spec sheet says that it is Linux 2.6, so they don't deny it.

I have not tried connecting via serial connection over usb yet. That might work.

Maybe they are using an old version of a webserver or have a cgi
script that they are using which is flawed so that I can exploit it to
run commands on the OS. I have not  tried  yet, but I will.

I think I might get some of the source code like they released with
their other products, but they will skip giving me the toolchain and
compiler like the GPL requires them to do. The other GPL linked source
code that they have is missing this important part of the source code.

On 3/2/07, curriegrad2004 <curriegrad2004 at gmail.com> wrote:
> Well, how is the kernel modified so that it is propriety in their own
> definition? And can you run a nmap with the -O option and see what the
> OS sig is?
> On 3/2/07, Thomas Charron <twaffle at gmail.com> wrote:
> >   Sorry if this is the wrong place to forward this, but I was unsure
> > which place to forward this sort of information to.  We just
> > researched this on our mailing list, and indeed, they do not provide
> > any sort of GPL notifications, nor the code.
> >
> >   They claim it is all 'proprietary' after we contacted them.
> >
> > ---------- Forwarded message ----------
> > From: thinkliberty <thinkliberty at gmail.com>
> > Date: Mar 1, 2007 6:58 PM
> > Subject: LaCie Ethernet Disk RAID
> > To: gnhlug-discuss at mail.gnhlug.org
> >
> >
> > I just got a "LaCie Ethernet Disk RAID" which runs Linux.
> >
> > They even tell you that the OS is Linux in the product feature chart.
> >
> > See:
> >  http://www.lacie.com/products/product.htm?pid=10877
> >
> > No where in the documentation (users manual, quick start guide, etc..
> > ) is a copy of the GPL or even a mention of it.
> >
> > I called their tech support line to see if they had a website or
> > something where I could download the source code or if they could mail
> > it to me and the tech support agent told me that I could not have it.
> > That the OS is proprietary!
> >
> > How could a sane company use software in their product without
> > agreeing or understanding the License? If I owned any Lacie stock I
> > would sell it.
> >
> > :/
> >
> >
> >
> >
> > _______________________________________________
> > gnhlug-discuss mailing list
> > gnhlug-discuss at mail.gnhlug.org
> > http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss/
> >
> >
> >
> > --
> > -- Thomas
> >
> >
>


--
-- Thomas