Filmware Update 1.100

[Sharry]

Sony have released the 1st firmware update for the Mylo. Sony states:

This utility updates the system firmware to version 1.100 to improve and enhance mylo Personal Communicator features. Improvements include:
Security vulnerability countermeasures
System stability enhancements
Internet applications interoperability improvements
Firmware link (http://esupport.sony.com/US/perl/swu-download.pl?mdl=COM1&upd_id=2324&os_id=99)

(This is in relation to Sony news id: 154)

Issue:
A potential security vulnerability has been identified in the Sony? mylo™ Personal Communicator that, under certain circumstances, may allow files on the mylo Personal Communicator to be accessed, changed, or deleted by an outside device.

What To Do If You Receive A Sync Request:
The following dialog box appears when the mylo Personal Communicator receives an access request:

http://img183.imageshack.us/img183/7492/mylosyncph4.gif


Please select "Deny" to reject this access.
NOTE: If you select "Allow" this dialog box will not reappear, and the unknown user could be able to log in freely to your mylo Personal Communicator.


PLEASE MAKE SURE YOU READ ALL REQUIREMENTS & INSTRUCTIONS FIRST BEFORE ATTEMPTING TO UPDATE YOUR SONY MYLO

[Rich-Myster]

for psp or for mylo?

[IronCook]

I believe she made a simple typo, I'm sure she meant Mylo.

Thanks spreading the word about the update. I had no clue there was an update until you notified me through your thread. I always forget to check for updates.

I'd really like to know what exactly was added and changed with this latest firmware. I'm most interested in the changes made to the Browser, they are so vague about what changed 8(.

[Sharry]

Sorry Guys, I meant MYLO NOT PSP.

.. I'm sure she meant Mylo...
Who's she? Hope you weren't talking bout me! :eek:
Sharry = Geoffery (Manx Gaelic)

I'll forgive ya this time!

Sorry guys, not much info given on this update, other than what I put.

[crater]

I'm wondering if they broke any of the ways the guys were getting into the Flash...

[LuciferRex]

sweet. Keep 'em coming, Sony!

[stackdj]

**NOTE** For people wanting to hack their mylo units!
-
You will not be able to upload debian binaries in the way that we are as this shuts off the FTP service running on port 4242.

[FrayAdjacent]

Maybe this update will help you haxxors figure out a way to get into the Mylo to change some things around?

I might check it out. 'internet applications interoperability improvements' I wonder what they mean by that?

[crater]

**NOTE** For people wanting to hack their mylo units!
-
You will not be able to upload debian binaries in the way that we are as this shuts off the FTP service running on port 4242.


What about first throwing a shell scrip in setup in one of the auto executing files to sart SSH or the FTP before updating? Would it completely wipe any changes?

[Nathan]

To answer Crater's question, yes, the update does wipe everything in /etc and /home/root. In other words, there is no way I can see to prevent an update from wiping out any hack you've put in place on your Mylo.

As stackdj notes, the update shuts off the 'easy way' in, via port 4242.

So if you want to play with your Mylo you should hold off on installing the update.

With that said, actually having an update.bin file in our hands is very useful information.

Wandy's Opera hack for read-only access still works if you escape it right, so it's still possible to explore the updated Mylo -- just not as easy to change it.

- Nathan

[Wesz]

Sorry Guys, I meant MYLO NOT PSP.


Who's she? Hope you weren't talking bout me! :eek:
Sharry = Geoffery (Manx Gaelic)

I'll forgive ya this time!

Sorry guys, not much info given on this update, other than what I put.
Yeah beware... He is the ADMIN :eek: :eek: :eek:

[indiekiduk]

haha no ftp, no updatey