algorithm_dk

6 ms·

61.
by algorithm_dk 12y ago
The technical part of this article is partially wrong. I will post the real way it works later along with a real demo you can try on your own number. Stay tuned!
62.
by algorithm_dk 12y ago
Great work man! I'm glad we can bring attention to security issues. Maybe we could work together.
63.
by algorithm_dk 12y ago
I never said I agree with Apple, I think it's a extremely bad default.
64.
by algorithm_dk 12y ago
I can't do responsible disclosure when there are tens of thousands of apps using webView. The number of vulnerable apps is way too high for any kind of responsible disclosure.
65.
by algorithm_dk 12y ago
It is not a 0day in the traditional meaning, it's a simple <did not read the manual> and <bad defaults> case. On the other hand I've been waiting to get on Apple's HoF for two years now, reporting cross-site scrip
66.
by algorithm_dk 12y ago
I did my test on WiFi which results in almost instant calls for me. Set your computer to catch the facetime call and answer it automatically (check this: https://github.com/PaperCutSoftware/teleportme/blob/mas
67.
by algorithm_dk 12y ago
Thanks a lot! I asked a friend to test it for me on android (wondering if it works) and I was glad that it doesn't. On Android it fills the phone number for you and lets you push the call button, which seems to me a much saner design.
68.
by algorithm_dk 12y ago
This is true, both bad defaults and people not reading documentation. It's just like mongo that start by default with remote access enabled and no password - Shodan "mongo" and you will find thousands of live, not protected d
69.
by algorithm_dk 12y ago
Send it using the Facebook Messenger app or GMail app. The fault is in the apps not in the system. Your code is correct.
70.
by algorithm_dk 12y ago
Absolutely an exploitation technique. Or you can facetime them instantly and catch a photo of them in pijamas!
71.
by algorithm_dk 12y ago
Because the apps can initiate a call by just pointing a webview at tel:0000. Another reason is hybrid apps, imagine a contact hybrid app running in something like PhoneGap. You want to click a button and call right away without the phone as
72.
RTFM 0day in iOS apps(algorithm.dk)
186 points by algorithm_dk 12y ago|58 comments
73.
Salami slicing(en.wikipedia.org)
1 points by algorithm_dk 12y ago|0 comments
74.
Ask HN: Is it legal to provide a phone tracking service?
1 points by algorithm_dk 12y ago|0 comments
75.
by algorithm_dk 12y ago
Ah.. what's the purpose of this? I don't get it.
76.
Oh Facebook(i.imgur.com)
4 points by algorithm_dk 12y ago|0 comments
77.
by algorithm_dk 12y ago
Why can another player retrieve my current location just because I posted a chat message? This information is not displayed in the game, but the data is retrieved. Every time the event list or the chat is loaded, along with each post conten
78.
by algorithm_dk 12y ago
I can't understand how they think this is OK.
79.
Ingress: Google is broadcasting your address to everyone.(algorithm.dk)
9 points by algorithm_dk 12y ago|8 comments
80.
Van Eck phreaking(en.wikipedia.org)
1 points by algorithm_dk 12y ago|1 comments
81.
by algorithm_dk 12y ago
Good thing we're all hackers here (hackernews right?)
82.
by algorithm_dk 12y ago
We need to stop useless forks.
83.
by algorithm_dk 12y ago
That's not what "hacker" means.
84.
3D Operating System(youtube.com)
8 points by algorithm_dk 12y ago|1 comments
85.
Intab: Quick Look for Chrome(iansilber.com)
2 points by algorithm_dk 12y ago|1 comments
86.
Seriously? Expired?(login.us.army.mil)
1 points by algorithm_dk 12y ago|1 comments
87.
Bagua(en.wikipedia.org)
1 points by algorithm_dk 12y ago|0 comments
88.
The Drake Equation(en.wikipedia.org)
1 points by algorithm_dk 12y ago|0 comments
89.
Stingray phone tracker(en.wikipedia.org)
2 points by algorithm_dk 12y ago|0 comments
90.
Gmail is down(i.imgur.com)
1 points by algorithm_dk 12y ago|0 comments

More ›