I've been playing with my Samsung HT-C5500 blu-ray player and 7.1 sound system that also runs linux in my spare time (not that I've had a lot of spare time). Th

I've been playing with my Samsung HT-C5500 blu-ray player and 7.1 sound system that also runs linux in my spare time (not that I've had a lot of spare time). The firmware is xor-ciphered, but once you get past that it's similar to a FAT filesystem, but is in fact modified so you can't write to it and reassemble the firmware easily (I have an action to set up a VM with the ported RFS filesystem[1]). My goal is to get a decent shell on that, then when I replace my TV later this year, root that and do some testing on HEC (HDMI Ethernet Channel) from inside an OS. There was some interesting research presented by Andy Davis of NGS at BHEU 12 earlier this year[2]. The scope for backdooring smart TVs is immense. These things are being used for video conferencing in businesses, as well as in homes and people aren't checking them out to make sure they're not being used to get access to networks, or to bug rooms. Hopefully I'll have something ready in time for BSides London[3] next year. [1] - http://wiki.samygo.tv/index.php5/RFS_file_system_support_for_linux http://wiki.samygo.tv/index.php5/RFS_file_system_support_for... [2] - http://www.youtube.com/watch?v=3TuCrd8Kvus http://www.youtube.com/watch?v=3TuCrd8Kvus [3] - http://www.securitybsides.org.uk/ http://www.securitybsides.org.uk/