catohagen

So....will there be an firmware update to the Mark IV, implementing the PineAP suite of tools ?

I doubt a lock or removal of content here helps users or developers, the point of a community is to help and interact with eachother, both users and the creators, a sensorship on honest and real questions about problems with a paid service or product serves no purpose here.

Karma seems to have problems fooling devices sold or with updated firmware after mid 2012, i made a detailed thread about it, trying to help find a solution and but unfortunately I was not taken very seriously by the developers and was basicly ignored or hushed down even some acknowledged that Karma doent work anymore, thread was here : https://forums.hak5.org/index.php?/topic/30411-issues-with-karma-in-mark-iv/ but thread seems to have vanished from this forum. Karma does listen and getting the probes, but security got better with wifi devices and they no longer connect to Karma-created ssid's, meaning the advertised main selling point of the wifi pineapple is void, rendering the device useless for most users.

Hi, I bought a Mark IV in september 2012 and could not get Karma working, and started a thread here about it, and now its gone ? https://forums.hak5.org/index.php?/topic/30411-issues-with-karma-in-mark-iv/ I've spendt hours and hours on research on different devices, trying to find a clue on where Karma fails, and the thread just vanishes...

The device probably worked as advertised from 2008-2011 with the Karma functionality picking up probes and faking SSID's. The problem seems to be with the creators/sellers of the Pineapple, as i'm sure its a problem that they cant fix as easy as some bugs. Darren, Seb and moderators here seems fast and friendly to reply with faults they can handle, as if you start a script wrongly, or some command line arguments are wrong, shipping and packaging faults etc, they respond and fix these things within hours. I've seen many people asking about Karma, and usally no reply's about why it doesnt work and the thread dissapear from the front page, I tried and tested Karma with around 10 different phones and tablets and Karma never worked as advertised, I report my findings and would love to helped and debug any new development with fixing Karma. Instead my problems where ignored and I continue to research and borrow friends devices and discover that phones from around 2011 works instantly with Karma, or Karma works instantly with devices from around 2011. Not with devices from bought 2012-2013 My intent with this thread where to help and put some light on this issue as Karma is cool as fuck, and I imagined I would have the Pineapple at home and everyone that visits would get internet access with their stored SSID's without touching some settingt or tapping an open wifi and that would just be cool :) Instead after weeks and more posts from others with the same issues, we get a reason from the creators why there is so silent, they are ready to announce a new hardware revision. But during the launch and after launch there are no mention of Karma, instead they remove the text in the Hak5 shop about Karma and how Karma works, they mention in a Google Hangout that 'some reports' say Karma isnt working, and then we get the speech from Darren about the 'landscape is changing' and 'cat and mouse game' and 'some tricks up our sleeve' but no mention of when or if a update is pending. If there was a update in the works, why not reply with this information in the thread several months ago ? If there was a update in the works, why not offer a 'devel' or beta version up for testing ? if not public testing but closed to users who care and know alittle bit about linux and have the knowledge to proper test stuff `? Why mention 'tricks up our sleeve' in the launch of the new hardware and not before the launch when this thread was started?, even a private message or email would do well if the need to keep the secret about the launch. Mentioning these new 'tricks' they have mid-launch for a new hardware revision seems questionable... Im certain that no such fix is in the works, as some of the points above would have made sense to do. I belive that they have no working Karma in development, the silence and lack of communication + the removal of the Karma advertisement in the Hak5 shop is proof of that. I have no idea if Darren or any Hak5 people makes a living out of this (ie. no other job), but I got the sense of 'hostility' from here even if my intent was good and be helpful on a resolve. Ofcourse if they make a living out of this and the product isnt working as advertised I wouldn't be happy either when reading about unhappy users, its bad for sales and bad for reputation...but the way they handled this wasnt the best way. Then the crusaders came around, defending...something I guess.....and nit-picking my arguments with really silly counter arguments...and thread was locked! They handled it as a corporation and not as a community friendly/driven project.

I didnt buy an older pineapple, I bought it last month and started this thread the same month : https://forums.hak5.org/index.php?/topic/30411-issues-with-karma-in-mark-iv/ At that time, last month the Mark IV was the current model and the Hak5 shop did have the description i included in post #14 Your are really nitpicking and taking things out of context, you are comparing me buying a current model of a product to your sega mega drive upstairs as the same....

Totally agree, but Karma or Jasager is one of the main features of the device, without it you cant really use any of the other stuff on the device, as you have to rely on people actually connecting manually to a new unknown open network.

Yeah, sorry about that misreading :)

You are out of context, it says most 'Most wireless devices have network software to automatically connects to access points they remember', that refers to the operating system installed on the 'victim' devices, and has nothing to do with Karma. You'll see that the last 4 lines refers to the Karma bit, or atleast I do...

But you didnt buy your sega this year...? All I wanted was to get focus on this issue, as new customers are still asking about Karma, as orginal poster of this thread, it didnt work on his Win 7, Galaxy Note 2 and Iphone....yet he belived it would. The speech about 'landcape have evolved, vendors have adapted' should be mentioned in the Hak5 shop description about the Wifi Pineapple so people will know this before they order the device.

Do I even write english ? @scotthelme Did you buy that Sega Mega Drive new this year ? and did you honest belive it had cutting edge graphics if you bought it new in 2013? I bought the Mark IV in September this year...we're in October now...one month ago the Hak5 shop had descriptions about the Mark IV and about Karma telling 'Yes, i'm your network' etc......how where I suppose to know ofcourse it doesnt work ? See the hak5 shop I was reading in september when I ordered the Mark IV : I posted in the Mark IV forums that Karma should be updated or the Hak5 shop description should be changed and maybe mention that Karma doesnt work well with newish devices.... And vendors havent 'just' started patching...the 'patching' that gave Karma problems started mid 2012....thats 1.5 years ago, and you can search in the forums and find reports dripping in here around that time: https://forums.hak5.org/index.php?/topic/30113-clients-not-probingconnecting-to-karma-in-mk4-with-fw-281/?hl=karma https://forums.hak5.org/index.php?/topic/29973-karma-issues-with-android-fw-281-or-300/?hl=karma https://forums.hak5.org/index.php?/topic/29055-convert-probes-to-fake-networks/?hl=karma Look, Darren and Sebkinne have both confimed what I wrote about the Karma, both here and in the Mark V Google Hangout, linked here : http://www.youtube.com/watch?v=L-wCTAZAB9I&t=64m45s It just surprises me when more new customers ask or mention problems with Karma, people jump down my throat when I say the same thing Darren is posting here in the forums, I just say it straight out without the purple filter

I've never said the Mark IV or Karma is broken, i've said it doesnt work as advertised or used to be advertised, as they have removed the text that describes how Karma works on the Mark V now. I bought the Mark IV in september 2013 and the $129+shipping+tax is well over $200, and Karma doesnt do anything on the devices in and around my home. No i didnt apparently do my homework, but found several threads about problems with Karma reported by other members here, and few and no responses from the creators on issues reported nearly 1.5 years ago. So instead of leaving it and forget about it like most other buyers did, I simply wanted to shead some light on the issue and report my findings, and get the developers attention since they've belived everything was ok. I've got, Samsung Note2, Samsung Galaxy 2, Samsung Galaxy 3, HTC OneX, Nexus 7 tablet, Sony Xperia X10 and Ipad 3 here in my house with stored free wifi's and none of them connected to any Karma created ssid. So I started downgrading some of my devices until it worked, and found that Karma fooled Android 4.1.x but not 4.2.x For comparison, selliing the Mark IV with Karma and saying it works perfect in 2013, would be similar to sell a device with Winnuke. Yes Winnuke still works in 2013 and will lock up and display a BSOD on Win95 machines, Win NT and Win 3,.1 thats not patched or have port 139 firewalled :) Problem is nobody uses win95 anymore, and nobody uses android 4.1.x or the equivalent wifi security from pre 2012

In theory, yes......in the real world, unlikely unless people spesificly selects to connect to your open wifi....as current Karma doesnt work with newish devices, so you can do the same with a normal router and laptop with sslstrip

Your devices are too new and secure for Karma to work, only way you 'see' Karma working is if you create a new SSID to connect to on your device. Wifi security got improved in 2012, rendering Karma basicly useless on new devices. As a workaround for your existing stored 'free wifis' you can (if your phone are rooted) edit /data/misc/wifi/wpa_supplicant.conf and add 'scan_ssid=1' to the ssid's config you want Karma to fake/create, Now you can see Karma working on your existing stored SSID's. While this should be unnecessary for a pen-testing tool and the mentioned update Darren talks about should be higher priority and kicked out the door asap, as it seems people are still unaware about the Pineapple shortcommings and buys this device in good faith as a cool pen-tester tool that doesnt work fully as advertised on the Mark IV. For Mark V, they skipped the description about Karma and the 'Yes i'm your network' part... so I guess Mark V works fully as advertised. Although this is the forum of the new Mark V, you can read my thread in the Mark IV forums about Karma and how its useless on new devices : https://forums.hak5.org/index.php?/topic/30411-issues-with-karma-in-mark-iv/

interesting video, great job! about Karma, it was brought up at the very end of the hangout , how Karma doesnt work on new devices, no update was ready but some tricks where up the sleve, with no eta given. But seems promising nevertheless