dfcmt
Joined 7 years ago
Karma
-7
Submissions
24
Member since
Aug 2
Recent submissions
Comment · 7 years ago
In this digital age, everything (text, images, audio) can be encoded using integers. Does that mean it's absurd to try to make anything secret?
Comment · 7 years ago
\w\d{3}[\s\-]?\d{2}[\s\-]?\d{4}\w should not have many wrong results.
You can also try to guess is something is a list of SSNs from the context.
Comment · 7 years ago
"A collection of awesome lists for hackers, pentesters & security researchers."
They are not using "hacker" in the "Hacker News" sense of the word, they are using meaning breaking into some system. So no "oh brother" moment here.
Comment · 7 years ago
But they aren't transmitted over public wifi. They are transmitted inside of some kind of private network, given that they are transmitted to a server in the 192.168/24 range
Comment · 7 years ago
>All extracted information is bundled as a ZIP file, without applying any protection like a
password. The ZIP file is then sent via an HTTP POST request to
http://192.168.43.1:8080/. This shows that not only no transport security (e.g. https://) is
in place, but also that an internal IP address is used.
Unless they're expecting a MITM from the police network (or wherever they use this app) why is no https a problem?
>BXAQ uses the default icon for Android apps, which means there is no attempt at being covert or discreet about it.
...or maybe they didn't put an icon because it's optional and unnecessary for what essentially is an internal app.
I mean really they are not trying to be unbiased or anything about the analysis.
Comment · 7 years ago
What's the vertical axis? What's BA?
Comment · 7 years ago
7 deaths in 17 years is not routine.
Comment · 7 years ago
People are being killed "routinely" for European football? That's simply ludicrous.
Comment · 7 years ago