Comments on: How to Hack XSilva Lightspeed to Get OpenBase Password http://www.dellanave.com/blog/2007/11/19/how-to-hack-xsilva-lightspeed-to-get-openbase-password/ Sat, 28 Aug 2010 04:01:26 +0000 hourly 1 http://wordpress.org/?v=3.0.1 By: Christian Skarby » Blog Archive » Obstacles with LightSpeed Web Store http://www.dellanave.com/blog/2007/11/19/how-to-hack-xsilva-lightspeed-to-get-openbase-password/comment-page-1/#comment-353 Christian Skarby » Blog Archive » Obstacles with LightSpeed Web Store Wed, 06 Aug 2008 10:59:08 +0000 http://www.dellanave.com/blog/2007/11/19/how-to-haxor-xsilva-lightspeed-to-get-openbase-password/#comment-353 [...] locks all our data in a database from www.openbase.com, it used to be possible to sniff the master database password, but that has changed after upgrading to 2.5.2 (and a newer version of openbase.) And for the time [...] [...] locks all our data in a database from http://www.openbase.com, it used to be possible to sniff the master database password, but that has changed after upgrading to 2.5.2 (and a newer version of openbase.) And for the time [...]

]]> By: david http://www.dellanave.com/blog/2007/11/19/how-to-hack-xsilva-lightspeed-to-get-openbase-password/comment-page-/#comment-349 david Thu, 24 Jan 2008 23:10:16 +0000 http://www.dellanave.com/blog/2007/11/19/how-to-haxor-xsilva-lightspeed-to-get-openbase-password/#comment-349 Scratch that, I can confirm that it works in 2.5 as well. Scratch that, I can confirm that it works in 2.5 as well.

]]> By: david http://www.dellanave.com/blog/2007/11/19/how-to-hack-xsilva-lightspeed-to-get-openbase-password/comment-page-/#comment-345 david Thu, 24 Jan 2008 22:10:08 +0000 http://www.dellanave.com/blog/2007/11/19/how-to-haxor-xsilva-lightspeed-to-get-openbase-password/#comment-345 Are you using something like ngrep to look at the dump file? Keep in mind tcpdump doesn't store anything in plaintext. I can't confirm it working on 2.5, but I can take a look. Are you using something like ngrep to look at the dump file? Keep in mind tcpdump doesn’t store anything in plaintext.

I can’t confirm it working on 2.5, but I can take a look.

]]> By: Indigo http://www.dellanave.com/blog/2007/11/19/how-to-hack-xsilva-lightspeed-to-get-openbase-password/comment-page-1/#comment-352 Indigo Thu, 24 Jan 2008 22:04:02 +0000 http://www.dellanave.com/blog/2007/11/19/how-to-haxor-xsilva-lightspeed-to-get-openbase-password/#comment-352 I'm having trouble reproducing your results with Lightspeed 2.5 here. I am running the LS server on a remote machine, so I modified the tcpdump command to listen on en0, and I do indeed see traffic to and from the database. However, there is very little plain text in it, and nothing that looks like a password. I'm wondering if xsilva now encrypts the traffic, or what. Can you confirm if this still works on LS 2.5? I’m having trouble reproducing your results with Lightspeed 2.5 here. I am running the LS server on a remote machine, so I modified the tcpdump command to listen on en0, and I do indeed see traffic to and from the database. However, there is very little plain text in it, and nothing that looks like a password. I’m wondering if xsilva now encrypts the traffic, or what. Can you confirm if this still works on LS 2.5?

]]> By: david http://www.dellanave.com/blog/2007/11/19/how-to-hack-xsilva-lightspeed-to-get-openbase-password/comment-page-/#comment-348 david Tue, 11 Dec 2007 21:41:13 +0000 http://www.dellanave.com/blog/2007/11/19/how-to-haxor-xsilva-lightspeed-to-get-openbase-password/#comment-348 Yes it would work almost exactly the same. Yes it would work almost exactly the same.

]]> By: david http://www.dellanave.com/blog/2007/11/19/how-to-hack-xsilva-lightspeed-to-get-openbase-password/comment-page-/#comment-347 david Tue, 11 Dec 2007 21:40:51 +0000 http://www.dellanave.com/blog/2007/11/19/how-to-haxor-xsilva-lightspeed-to-get-openbase-password/#comment-347 I'm very, very happy with lightspeed overall. Honestly, the new iPhone Stats feature pretty much eliminated my desire to access the SQL. I’m very, very happy with lightspeed overall. Honestly, the new iPhone Stats feature pretty much eliminated my desire to access the SQL.

]]> By: Louis http://www.dellanave.com/blog/2007/11/19/how-to-hack-xsilva-lightspeed-to-get-openbase-password/comment-page-1/#comment-346 Louis Tue, 11 Dec 2007 20:38:27 +0000 http://www.dellanave.com/blog/2007/11/19/how-to-haxor-xsilva-lightspeed-to-get-openbase-password/#comment-346 I am thinking of using lightspeed, and I would like to know if you still recommend it after having used it. I own a retail bookstore, and I am interested in the features of using the online store that operates from the same database as my pos I am thinking of using lightspeed, and I would like to know if you still recommend it after having used it. I own a retail bookstore, and I am interested in the features of using the online store that operates from the same database as my pos

]]> By: Tim Putnam http://www.dellanave.com/blog/2007/11/19/how-to-hack-xsilva-lightspeed-to-get-openbase-password/comment-page-1/#comment-343 Tim Putnam Sun, 02 Dec 2007 15:52:24 +0000 http://www.dellanave.com/blog/2007/11/19/how-to-haxor-xsilva-lightspeed-to-get-openbase-password/#comment-343 Hello Dellanave, I am having a similar issue with a program called Daylite. I purchased Daylite and imported 18 years of data for my company.. I am very disappointed with Daylite's user interface and want to access the sql database so I can run my own reports and queries.... Just like LightSpeed the database is "Open Base SQL" and there is a password... My operating system is Mac OX and I was wondering if your solution would work for me? Thanks in advance for your reply... Tim Putnam Hello Dellanave,
I am having a similar issue with a program called Daylite. I purchased Daylite and imported 18 years of data for my company..
I am very disappointed with Daylite’s user interface and want to access the sql database so I can run my own reports and queries….
Just like LightSpeed the database is “Open Base SQL” and there is a password…

My operating system is Mac OX and I was wondering if your solution would work for me?

Thanks in advance for your reply…

Tim Putnam

]]> By: Companies Being Careless With Employee Data - ShoeMoney® http://www.dellanave.com/blog/2007/11/19/how-to-hack-xsilva-lightspeed-to-get-openbase-password/comment-page-1/#comment-350 Companies Being Careless With Employee Data - ShoeMoney® Fri, 23 Nov 2007 19:48:33 +0000 http://www.dellanave.com/blog/2007/11/19/how-to-haxor-xsilva-lightspeed-to-get-openbase-password/#comment-350 [...] Dillsmack made a post about haxing the Xsilva Lightspeed POS system to get the database password. Now obviously this isnt really that big of security issue for [...] [...] Dillsmack made a post about haxing the Xsilva Lightspeed POS system to get the database password. Now obviously this isnt really that big of security issue for [...]

]]> By: Mike Peters http://www.dellanave.com/blog/2007/11/19/how-to-hack-xsilva-lightspeed-to-get-openbase-password/comment-page-1/#comment-351 Mike Peters Thu, 22 Nov 2007 00:57:02 +0000 http://www.dellanave.com/blog/2007/11/19/how-to-haxor-xsilva-lightspeed-to-get-openbase-password/#comment-351 Just watched the XSilva video. Looks hot! What type of products are you going to be using it with? Electronics? Just watched the XSilva video. Looks hot!

What type of products are you going to be using it with? Electronics?

]]>