Hammerer, picker, strummer and concatenator of strings.
Joined August 2023
- Tweets889
- Following133
- Followers41
- Likes17.2K
Paul Reilly retweeted
Bypassing #EU #AgeVerification using their own infrastructure.
I've ported the Android app logic to a Chrome extension - stripping out the pesky step of handing over biometric data which they can leak... and pass verification instantly.
Step 1: Install the extension
Step 2: Register an identity (just once)
Step 3: Continue using the web as normal
The extension detects the QR code, generates a cryptographically identical payload and tells the verifier I'm over 18, which it "fully trusts".
This isn't a bug... it's a fundamental design flaw they can't solve without irrevocably tying a key to you personally; which then allows tracking/monitoring.
Of course, I could skip the enrolment process entirely and hard-code the credentials into the extension... and the verifier would never know.
Hacking the #EU #AgeVerification app in under 2 minutes.
During setup, the app asks you to create a PIN. After entry, the app *encrypts* it and saves it in the shared_prefs directory.
1. It shouldn't be encrypted at all - that's a really poor design.
2. It's not cryptographically tied to the vault which contains the identity data.
So, an attacker can simply remove the PinEnc/PinIV values from the shared_prefs file and restart the app.
After choosing a different PIN, the app presents credentials created under the old profile and let's the attacker present them as valid.
Other issues:
1. Rate limiting is an incrementing number in the same config file. Just reset it to 0 and keep trying.
2. "UseBiometricAuth" is a boolean, also in the same file. Set it to false and it just skips that step.
Seriously @vonderleyen - this product will be the catalyst for an enormous breach at some point. It's just a matter of time.
Paul Reilly retweeted
Boost Blueprint 015: Boost.Interprocess. A comprehensive toolkit for shared memory and synchronization. It enables multiple processes to share data segments and structures with minimal latency, bypassing the overhead of networking stacks
Apologies for the eye test :)
Level up your C++ architecture. Follow @Boost_Libraries
for the #BoostBlueprint series
#cpp
Paul Reilly retweeted
A flexible concrete mat designed to protect riverbanks and hillsides from erosion.
Paul Reilly retweeted
"Angel" #GLSL
for(float i,z,d,j;i++<5e1;o+=(sin(z+vec4(2,3,4,0))+1.1)/d){vec3 p=z*normalize(FC.rgb*2.-r.xyy);p.z+=6.;p.xz*=mat2(cos(p.y*.5+vec4(0,33,11,0)));for(j=1.;j<9.;j/=.8)p+=cos((p.yzx-t*vec3(3,1,0))*j)/j;z+=d=.01+abs(length(p.xz)-.5)/9.;}o=tanh(o/1e3);
Paul Reilly retweeted
We created a library that allows you to programatically generate flamegraphs in your program. More info here:
johnnysswlab.com/fiya-flameg…
