modbros / mobro-raspberrypi Goto Github PK

1. 12th Gen Intel(R) Core(TM) i7-12700KF 3.60 GHz
2. Asus ROG Strix B660-I Gaming WiFi
3. windows 11
4. 1.0.0-beta10

Updating currently requires the SD card to be flashed again with the new image. This is not ideal.
Enable automatic update or at least manually triggered update via configuration page or rest endpoint.

I had used your app many times but now it's chrashing without any alert. Looking on my windows registry event I found this error any time I had tried to launch the app, with administrator privilege too

- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
 - <System>
  <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" /> 
  <EventID Qualifiers="0">10016</EventID> 
  <Version>0</Version> 
  <Level>3</Level> 
  <Task>0</Task> 
  <Opcode>0</Opcode> 
  <Keywords>0x8080000000000000</Keywords> 
  <TimeCreated SystemTime="2023-01-08T16:32:23.6520686Z" /> 
  <EventRecordID>58437</EventRecordID> 
  <Correlation ActivityID="{de2044de-9ea8-4140-961e-7b2abdeabb30}" /> 
  <Execution ProcessID="1396" ThreadID="31240" /> 
  <Channel>System</Channel> 
  <Computer>MyPC</Computer> 
  <Security UserID="S-1-5-21-131938479-3630242823-3704963213-1001" /> 
  </System>
-<EventData>
  <Data Name="param1">application specific settings</Data> 
  <Data Name="param2">Local</Data> 
  <Data Name="param3">Activation</Data> 
  <Data Name="param4">{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}</Data> 
  <Data Name="param5">{15C20B67-12E7-4BB6-92BB-7AFF07997402}</Data> 
  <Data Name="param6">MyPC</Data> 
  <Data Name="param7">giorg</Data> 
  <Data Name="param8">S-1-5-21-131938479-3630242823-3704963213-1001</Data> 
  <Data Name="param9">LocalHost (LRPC)</Data> 
  <Data Name="param10">Unavailable</Data> 
  <Data Name="param11">Unavailable</Data> 
  </EventData>
  </Event>

I don't know what else I can find to help you track the error because I don't receive any messages from the app.
I hope you can help me
thanks

Hi,
I'm unable to boot. It always reboots when showing the MoBro splash screen.
I've changed from a RPi Zero 2 to a RPi 3B. I have also re-downloaded and reflashed the SD.

Downloaded v12 three different times from https://www.mod-bros.com/en/mobro/download/latest?download-type=image thinking it might be an issue in transit. Used 7-zip on W10 x64 Home (just like I did with v11 and v10). Flash fails every time on balena 1.5.120. I have tried with two different USB microSD card readers (one I KNOW works, having just flashed Raspbian). One is USB-A 3.0 and the other, USB-C 3.0. Tried with verifying flash in balena and not. When skipping verification, the pi will boot and I just get a black screen, flashing cursor. Not sure what is failing...

So, i have a small computer running Ubuntu server, so was wondering if it would be possible to run this on it without installing RPi OS...

From source code maybe?

An OS command injection vulnerability exists in the web interface of mobro-raspberrypi. It allows an unauthenticated attacker to execute arbitrary OS commands on the host, with the privileges of the web server.

Affected versions

Commit fa0a9fa, version 12.3 and older

Steps to reproduce

1. Visit /api/log/index.php?lines=0 /dev/null;uptime;ls

The output of the uptime command is shown in the HTTP response.

Cause

An unsanitized GET parameter is passed to shell_exec() at api/log/index.php:8.

Impact

An unauthenticated user is able to execute arbitrary OS commands by including semicolons in the lines parameter to terminate the intended command.

Proposed Mitigation

Ensure that $_GET['lines'] is numeric, as is already done in the syslog component.

I've grabbed v12 and applied the same setup as before (180 rotation) and everything works besides the screen appearing upside down. I've tried going between no rotation and 180 rotation, neither seem to make a difference.

Model: Pi 3B+
Display driver: GoodTFT - MHS35-show

Currently the display driver can be installed from the configuration wizard.
Setting the display orientation or rotation requires manual configuration via SSH.
The rotation value should be exposed via the configuration wizard as well.

Make use of OverlayFS for the MoBro Raspberry Pi image to prevent SD card corruption.
Especially relevant if the Raspberry Pi isn't able to perform clean shutdowns.
E.g.: It is directly connected to and powered by the motherboard and therefore just looses power whenever the PC
is shut down.

https://www.datalight.com/blog/2016/01/27/explaining-overlayfs-%E2%80%93-what-it-does-and-how-it-works/

If the Pi doesn't power down when the PC is shut down, the display stays on an the Pi periodically tries to reconnect ot the PC.
We could add a setting the display some sort of screensaver in this case.
Or turn off the display completely (if possible).

https://www.mod-bros.com/en/forum/t/new-feature-request-screensaver-powersave-mode~854

Hey, so I found the Pull associated with USB gadget mode.

raspberrypi/linux#1239

Could this be added to the image?

Also looking around the USB gadget mode is supported by Raspberry Pi Zero, Zero W, Model A, Model A+, and PI 4. This would allow you to only have one connection to the Pi and the Pi would have its own private network.

Setting this up manually would be very difficult but if it could be included in the configurator or at least have the option to edit the config file that would make this process way easier!

See forum for the hard way: Using RNDIS/Ethernet to connect Raspberry Pi Zero to a computer network.