Oli

Yep, or whoever it is who doesn't know how to manage code releases / use github :) A bit of a lack of professionalism really if it is all meant to be hush hush until DEFCON.

You still have some links up. Note to self - don't post code to public source repositories if you don't want it to be public.

Not much, just all the module code and the link to the bin that can be unsquashed to get ALL the turtle code :) Having all the code tells you the architecture, whether wifi is present, etc

Search github for lanturtle, it was forked. The files have a link to the bin file that can then be unsquashed to get the openwrt code.

No love for the turtle? Anybody downloaded the code and firmware yet and had a poke around like me? I was expecting some news after the open house - especially as it was supposed to be on show.

I'd recommend using the latest version from github and if the problem is still there open an issue: https://github.com/mushorg/conpot/issues

Google is your friend: http://stackoverflow.com/questions/7475223/mysql-config-not-found-when-installing-mysqldb-python-interface

Indeed. Cory Doctorow and Bruce Schneier have interesting input on this. I doubt any backdoor would be easy to find as the code would typically be proprietary and/or on a server somewhere, but eventually it is inevitable that they would be exploited by someone.

Don't get me started ranting about lack of decent documentation! :) It is all a bit of a mess, but appears to be slowly getting better (with a mdwiki etc). Best thing would be to google the underlying tool for the infusion (usually pretty obvious) or search the forums for the relevant introduction / support thread.

Use a payload that is known to work and use delays.

Without releasing any spoilers, it does look like the deployment method is actually a USB to ethernet provider where the "victim" gets internet via the turtle - or at least this is one scenario. Yep, usb powered. ​ ​Edit: Got my hands on the firmware so I pretty much know all I need to now! :)

I downloaded the zip whilst it was live, it answered some of my questions as to what the turtle is. I'm still a bit baffled as to the deployment usecase: a pineapple should be able to do the same + with wifi. I guess the USP is just a small form factor?

Looks like wiki is live: https://github.com/sebkinne/lanturtle-wiki

Good luck! Hope you can afford the loss. I'd say the chance of this been delivered in "two weeks" is essentially zero (especially if he doesn't even have a ducky yet). I'd suggest paying after delivery of working code...

Yep, probably a significant percentage and potentially a 'brokerage' fee + more chance of a customs delay. At least if you are buying from within the EU you know the exact amount you are paying upfront.