Oscam Ymod bacdoor?

[duhoki]

I am currently using oscam ymod and have readed several places on internet about it might be backdoored becouse the author is keeping a changed source code for himself only and releasing only compiled versions of his oscam ymod. If this is true then it will be risk of getting you server stolen etc..

So if anybody have any more info/experience about this version of oscam, please share.

[gianni253]

Re: Oscam Ymod bacdoor?

Never used oscam ymod but if you want to check if there is a backdoor just issue "netstat" command from a telnet session and you will easily know ...

[SatWaveDude]

Re: Oscam Ymod bacdoor?

What is Oscam Ymod in fact?

Is it an oscam with more of less features...

Please give some more info.

[kalpikos]

Re: Oscam Ymod bacdoor?

What is Oscam Ymod in fact?

Is it an oscam with more of less features...

Please give some more info.

Oscam Ymod is a version with emu included.
So, it can handle softcam.key files.
It's a closed source oscam version by Ymod
and for many oscam users it's the best oscam version.

[luk4asz]

Re: Oscam Ymod bacdoor?

Almost all programs have bugs. Some of these errors are Backdoors. If a good hacker knows your IP and knows what programs and protocols that use hacks to you. To check if you have an open port or oscam ymod not send data. Start sniffer and see where it connects.

[duhoki]

Re: Oscam Ymod bacdoor?

I have monitored it for some days now, but cant see any problem with it yet. I belive if it is backdoored it will not have send anything to a remote adress all the time but maybe once in a week or somethign like that to make the backdoore more secure.

However, thank you all for your information, i will post if i see anything. If i have time i will try decompiling binaries, and if any result i will post it here.

Have a nice weekend

[SatWaveDude]

Re: Oscam Ymod bacdoor?

Almost all programs have bugs. Some of these errors are Backdoors. If a good hacker knows your IP and knows what programs and protocols that use hacks to you. To check if you have an open port or oscam ymod not send data. Start sniffer and see where it connects.

You say a good hacker knows your IP, you dont have to be good to find somebody's IP address it's childsplay if you ask me!

Even if you know the open ports you have to penetrade (hack) inside and check for vurnablilities if any.

You also have to got the knowledge and understanding the protocol your dealing with.

[Satphoenix]

Re: Oscam Ymod bacdoor?

It sounds like the same discussion with the cccam-backdoor.

Often announced but never really proofed...

The "several places on internet" which write these rumors often copy and paste without any serious source.

[gianni253]

Re: Oscam Ymod bacdoor?

Real dangers in emu backdoors should fall only in two categories:
- users/passwords leaks (to reuse them in other systems)
- ip forwarded to providers (to build black lists or to fight piracy, in general)

In both cases it's not something that exposes your system to an external attack ...

[Satphoenix]

Re: Oscam Ymod bacdoor?

Real dangers in emu backdoors should fall only in two categories:
- users/passwords leaks (to reuse them in other systems)
- ip forwarded to providers (to build black lists or to fight piracy, in general)
...

And that's the problem which gives some users a very bad feeling if rumors are spreaded over different sources.

But I don't believe in that rumors untill they are proofed.
OK, I also can't proof the opposide...

[SatWaveDude]

Re: Oscam Ymod bacdoor?

The only thing to do here is sniffing the IP connections of the Oscam Ymod.

Tthat would be easy by using a sniffing software or as I use WallWatcher in combination with an DD-WRT compatible router it is super easy to see all the IP it's connected to and of course you can log all these data.

[Satphoenix]

Re: Oscam Ymod bacdoor?

The only thing to do here is sniffing the IP connections...

And what shall the programwriter do with this informations?
And think of all the connections simultaniosly - makes not really sense.

[duhoki]

Re: Oscam Ymod bacdoor?

The programwriter can forward what ever he want from you oscam server and i belive oscam.server and oscam.config will be something he will get information from.