<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
    <channel>
        <title>Presenter on Nico Maas</title>
        <link>https://www.nico-maas.de/tags/presenter/</link>
        <description>Recent content in Presenter on Nico Maas</description>
        <generator>Hugo -- gohugo.io</generator>
        <language>en-us</language>
        <lastBuildDate>Fri, 04 Dec 2015 13:11:43 +0000</lastBuildDate><atom:link href="https://www.nico-maas.de/tags/presenter/index.xml" rel="self" type="application/rss+xml" /><item>
            <title>[Logitech] R400 Presenter pairing</title>
            <link>https://www.nico-maas.de/posts/2015-12-04-logitech-r400-presenter-pairing/</link>
            <pubDate>Fri, 04 Dec 2015 13:11:43 +0000</pubDate>
            <guid>https://www.nico-maas.de/posts/2015-12-04-logitech-r400-presenter-pairing/</guid>
            <description>&lt;p&gt;&lt;strong&gt;Warning&lt;/strong&gt;: The R400, R600 and R700 series of presenters are attack vectors and considered harmful. While Heise made an &lt;a class=&#34;link&#34; href=&#34;https://www.heise.de/news/Angreifbare-Logitech-Presenter-Hersteller-tauscht-gefaehrliche-USB-Empfaenger-aus-4423627.html&#34;  target=&#34;_blank&#34; rel=&#34;noopener&#34;&#xA;    &gt;article &lt;/a&gt; that detailed that Logitech would exchange the receivers, it did actually not. They sent out a pair of incompatible C-U0014 receivers which could not be paired with R-R0004 presenters and then stopped their program, claiming only to exchange the presenter if it was under warranty, which is a security nightmare (I just tried to get the correct receiver, but Maven M. from Logitech wanted to have the receipt for the module which I obviously do not have anymore). In other words: The hardware is extremely vulnerable, Logitech accepts that it is like that but does not want to get this fixed, so I can only recommend to dispose of the presenter line and do not buy from Logitech anymore. Here is the security write up with the proof of concept to that attack: &lt;a class=&#34;link&#34; href=&#34;https://seclists.org/fulldisclosure/2016/Oct/60&#34;  target=&#34;_blank&#34; rel=&#34;noopener&#34;&#xA;    &gt;https://seclists.org/fulldisclosure/2016/Oct/60&lt;/a&gt;&lt;/p&gt;</description>
        </item></channel>
</rss>
