Introduction
Introduction Statistics Contact Development Disclaimer Help
Post An47jbHM09fBwojuQS by [email protected]
More posts by [email protected]
Post #An2huvsMyF5N2zpueu by [email protected]
0 likes, 0 repeats
oooh, the redbox uses full AES encryption! and they always use the same key whi…
Post #An2iHvu723mfnLcRM0 by [email protected]
0 likes, 0 repeats
correction: they hardcode two separate keys in the two separate places (that I&…
Post #An2jIe8OgVOMvYCkPQ by [email protected]
0 likes, 0 repeats
this code is enterprise as hellyou need the url for the base client? well you u…
Post #An2k1QHx0gU7141Zho by [email protected]
0 likes, 0 repeats
they wrote their code as a fuckton of C# services that are always HTTP POSTing …
Post #An2k3vRY9FGGDihvge by [email protected]
0 likes, 0 repeats
@foone real question : if your code contain a function that use AES to encrypt …
Post #An2k68GHSeeMYRUMds by [email protected]
0 likes, 0 repeats
HTTP is, as always, the poor man's IPC
Post #An2k8f3GWGWepXbgeW by [email protected]
0 likes, 0 repeats
@Fangh you shouldn't put it in the source at all! it should be stored elsew…
Post #An2kKl4bxNEsyu0LsO by [email protected]
0 likes, 0 repeats
@foone Considering my dad's work stuff I've heard and seen, it's st…
Post #An2kTRwmRAEuGhUD0C by [email protected]
0 likes, 0 repeats
@foone cowards.SMTP is the superior choice.
Post #An2lGkBfPRy91pxFU8 by [email protected]
0 likes, 0 repeats
@foone Java was a mistake
Post #An2lGkJ6xlvLOvRC5Y by [email protected]
0 likes, 0 repeats
@cinebox it's not java! it's C#
Post #An2lVp11jw1ELbASDA by [email protected]
0 likes, 0 repeats
@foone boutta ssh into google and find grep a search query
Post #An2n0lENxcNrXbjU00 by [email protected]
0 likes, 0 repeats
@foone This is like leaving keys on a shelf beside the door.
Post #An2nUkYB3Xni7KI2RU by [email protected]
0 likes, 0 repeats
@foone look for CORBA
Post #An2nUkhkTxSOb0lgMS by [email protected]
0 likes, 0 repeats
@petrillic @foone WSDL is just round the corner!
Post #An2nUkpC2HPay6Fcxs by [email protected]
0 likes, 0 repeats
@piofthings @petrillic oh god I used to do WSDL stuff when I was doing soap for…
Post #An2nbnQqjwb559DrBw by [email protected]
0 likes, 0 repeats
@foone what is a TMP?
Post #An2oVXR1P8EHgTsnGy by [email protected]
0 likes, 0 repeats
@foone @cinebox What is the C# equivalent of AbstractSingletonProxyFactoryBean,…
Post #An2p3XT1n4N3d92A40 by [email protected]
0 likes, 0 repeats
@foone @petrillic atleast it wasn’t JSONx https://github.com/danharper/jsonx
Post #An2pKnbt1bEScTPLQO by [email protected]
0 likes, 0 repeats
they logged the first six digits and last 4 digits of every credit card transac…
Post #An2pOZ3b4gqIdtAGSu by [email protected]
0 likes, 0 repeats
@foone MCA was better but IBM kept it proprietary…
Post #An2pUEE1RKjvlrk2wi by [email protected]
0 likes, 0 repeats
1234 56## #### 7890can I buy a vowel?
Post #An2pe8QJrhP8foDXMG by [email protected]
0 likes, 1 repeats
I'm trying to tar up a redbox install and upload it, but each time the tar …
Post #An2pgwQKw6o2KFZ0Xg by [email protected]
0 likes, 0 repeats
@foone slip Carol twenty quid and she'll sort you out
Post #An2prOpEC9kNJ6C2Iy by [email protected]
0 likes, 0 repeats
@foone Is that enough to solve it, since you have the check digit?
Post #An2pvgqr7F6MNB05lw by [email protected]
0 likes, 0 repeats
@lyncia as in those former movie kiosks, yes.
Post #An2qtosAQFGMcoHmOO by [email protected]
0 likes, 0 repeats
@foone Yes, you got Ä.
Post #An2r6WP0PE9V6YhcLA by [email protected]
0 likes, 0 repeats
@foone AE IOUY
Post #An2rDWqJAProUuoY9Q by [email protected]
0 likes, 0 repeats
You're telling me!
Post #An2rS0a3OoROmY7FUO by [email protected]
0 likes, 0 repeats
@foone to be fair, per the pci compliance rules I had to learn a while back, th…
Post #An2rnhzlBDB9VlUGn2 by [email protected]
0 likes, 0 repeats
@foone you got one?
Post #An2rqFmmWAg6tGd8Uq by [email protected]
0 likes, 0 repeats
@foone These units are not fairing well around here. They're discolored, ru…
Post #An2rvM0WoTR5dPUZnM by [email protected]
0 likes, 2 repeats
OH HEY BAD NEWS:when someone opens up the hard drive of a redbox unit, they can…
Post #An2s2n3eder3YbV5Ae by [email protected]
0 likes, 0 repeats
@foone Ewww
Post #An2s5k0oQ4JgymZteC by [email protected]
0 likes, 0 repeats
@foone there's probably a german word for the combination of "big oof&…
Post #An2s8Wszg7r98dFaym by [email protected]
0 likes, 0 repeats
@foone huh. That feels like it should be illegal but somehow isn’t. The gover…
Post #An2sBhvd4y1CFqzywC by [email protected]
0 likes, 0 repeats
@foone Rented from that unit or from any unit? Either way that doesn’t seem g…
Post #An2sE3JOY0BX9YEVc0 by [email protected]
0 likes, 0 repeats
@h0m54r just from that unit.
Post #An2sHYsJeW3XuhExfc by [email protected]
0 likes, 1 repeats
the unit I've got an image for has records going back to at least 2015. I w…
Post #An2sJ7G3Is5Iq75Gzo by [email protected]
0 likes, 0 repeats
@foone Well that’s lovely.
Post #An2saMYnf9GJDp4q8G by [email protected]
0 likes, 0 repeats
I have 2471 transactions here.
Post #An2suP16EtsEdFryfw by [email protected]
0 likes, 0 repeats
@foone that you have so _few_ transactions for nearly 10 years on that one driv…
Post #An2swotqyfClUDdJCq by [email protected]
0 likes, 0 repeats
@foone Isn't video rental history... one of the few things we have actual p…
Post #An2szeb9jcpCPCErUu by [email protected]
0 likes, 0 repeats
@rgegriff against who?Redbox inc is gone
Post #An2szek1CfuiqgNwJM by [email protected]
0 likes, 0 repeats
@foone @rgegriff the CTO at the time this code was frozen?
Post #An2tP2JWhJxxCK60Xo by [email protected]
0 likes, 0 repeats
Somebody I'll call Dave Fakename rented The Giver and The Maze Runner in Mo…
Post #An2tVlqaJrBS9blnSy by [email protected]
0 likes, 0 repeats
@foone The first six are the Issuer Identification Number (IIN) and are shared …
Post #An2tcacMT695LzMuWW by [email protected]
0 likes, 0 repeats
@bosh all of those things would require competence that redbox inc has famously…
Post #An2txe4qnjLIAFjabo by [email protected]
0 likes, 0 repeats
@foone Does it say how many times? I mean, if I^H a friend rented Gigli every w…
Post #An2txeE4FSiOcq2wyW by [email protected]
0 likes, 0 repeats
@Cloudscout yes
Post #An2uFEtDBfHlG5gCR6 by [email protected]
0 likes, 0 repeats
@foone I wrote a tool that takes a binary and sequentially tries all data as de…
Post #An2uLEPdsCfVW6hpzc by [email protected]
0 likes, 0 repeats
@foone hahahahah
Post #An2uoxb2xXry3BDT8q by [email protected]
0 likes, 0 repeats
@foone Sounds about right. It was probably written in the late 2000s or so, dur…
Post #An2v5p2q0Y1KRzFv2e by [email protected]
0 likes, 0 repeats
found a THIRD set of encryption code. this one is 3des instead of AES, and YEP …
Post #An2vDN8hdwn0DhbD9s by [email protected]
0 likes, 0 repeats
@foone seven hells, Redbox is sounding like a checklist of how NOT to do infose…
Post #An2vGI3J0t1FJNSxNI by [email protected]
0 likes, 0 repeats
@todb the company is gone. who are we suing?
Post #An2vViCw3ClCm5K96u by [email protected]
0 likes, 0 repeats
Redbox.HAL.Configuration.ConfigurationFileService implements IConfigurationFile…
Post #An2vc4y2LMXr6GOKEC by [email protected]
0 likes, 0 repeats
AND HEY YOU DON'T NEED A SEPARATE C# CLASS FOR EACH XML FILE YOU LOADYOU CA…
Post #An2vmoDcxF9CLBnfM0 by [email protected]
0 likes, 1 repeats
this is the kind of code you get when you hire 20 new grads who technically kno…
Post #An2vnXhzpBB5QPM3RA by [email protected]
0 likes, 0 repeats
@foone I thought that was /tmp
Post #An2vnXrDGuYBszfPns by [email protected]
0 likes, 0 repeats
@aburka @foone writing http requests into files in /tmp and then polling for th…
Post #An2vnXyepEVOG59MPI by [email protected]
0 likes, 0 repeats
@emily @aburka it kinda does that too
Post #An2wB1i0S0Jd84Ycb2 by [email protected]
0 likes, 0 repeats
@foone the important thing is that they can write in a document somewhere that …
Post #An2wM7QlW7K23pmZF2 by [email protected]
0 likes, 0 repeats
@foone I was gonna say it sounds like when someone's made their 5th website…
Post #An2wOXQxoCblHt1qNM by [email protected]
0 likes, 0 repeats
@foone Given the checksum that’s probably not a huge number of valid numbers.
Post #An2wjRJJloYKNTQ2O8 by [email protected]
0 likes, 0 repeats
@foone I saw this with people that had been doing it for 20 years but clearly n…
Post #An2woPym9CithFBUlk by [email protected]
0 likes, 0 repeats
so these people wrote a mostly C# program, with some lua for glue scripting.and…
Post #An2wypIarep77UPvhw by [email protected]
0 likes, 0 repeats
@foone this sounds like they're using XmlSerializer to deserialise into cla…
Post #An2x2I1KXDlP4Czg9I by [email protected]
0 likes, 0 repeats
it's a compiled (to bytecode? I think?) cooperative-multitasking BASIC.and …
Post #An2x87mzUHO54Z4L3Y by [email protected]
0 likes, 0 repeats
@foone and Lua was just there, holding it's little arms to the sky, waiting…
Post #An2xAmOvSrB5bi4wxE by [email protected]
0 likes, 0 repeats
@foone it’s probably in their GitHub repo too
Post #An2xF6sdGWBIHS2SSu by [email protected]
0 likes, 0 repeats
okay by "compiling" they mean "parsing". The output of the …
Post #An2xPJFA9Zj7WLRNKK by [email protected]
0 likes, 0 repeats
example code:POPSTART-DECKPOPSTART-SLOTPOP END-DECKPOP END-SLOT…
Post #An2xWi5SBVgqb9QbQ0 by [email protected]
0 likes, 0 repeats
@jbaggs they were not good at programming things
Post #An2xbawk9zlBtsgQPQ by [email protected]
0 likes, 0 repeats
Foone's official list of things they never expected to implement their own …
Post #An2xkOUbpfg9sjifMO by [email protected]
0 likes, 0 repeats
@foone sloppy
Post #An2xmpaW417qUme120 by [email protected]
0 likes, 0 repeats
@Taffer thankfully this device doesn't have any github repos in it. that I&…
Post #An2xpQ49PVtqD1jwR6 by [email protected]
0 likes, 0 repeats
@foone oh lord
Post #An2xsEiE4zLNrhpP3g by [email protected]
0 likes, 0 repeats
@foone infinite face palm
Post #An2y7NZVQHJ1gZyCKe by [email protected]
0 likes, 2 repeats
@foone Paging Hans Peter Luhn
Post #An2yKXqkWJx5KMJUUy by [email protected]
0 likes, 0 repeats
@foone instead of fresh graduates could it be peeps from Poland ? Back at the T…
Post #An2yTtLxwLxCcqN62a by [email protected]
0 likes, 0 repeats
Redbox.HAL.IPC.Framework.ClientSessionFactoryPLEASE, NO MORE FACTORIESMY CHILDR…
Post #An2yt3oy9s4wKXwHpY by [email protected]
0 likes, 0 repeats
@MishaVanMollusq possibly it was fresh graduates from poland?
Post #An2z0YOStAAlB07BZo by [email protected]
0 likes, 0 repeats
oh good they implemented both an internal C# dynamic plugin loading system, as …
Post #An2zFS3UjiQHrXPUAq by [email protected]
0 likes, 0 repeats
@foone WHAT this is an heresy against the mighty DESIGN PATTERNS cult
Post #An30JHgxJFqYpiG7lY by [email protected]
0 likes, 0 repeats
@foone Honestly making a bad threading enabled compiled BASIC is on my list of …
Post #An30N0byku7d1Ahua0 by [email protected]
0 likes, 0 repeats
microservices and DDD was the rage
Post #An30cl44KIVtQvM7rk by [email protected]
0 likes, 0 repeats
@foone It would be amazing if you could figure out a way to create a program th…
Post #An30etqsctzRGXCyH2 by [email protected]
0 likes, 0 repeats
@MishaVanMollusq nope, disk image from one
Post #An31aYFx4neZ5GQSY4 by [email protected]
0 likes, 0 repeats
@foone Suddenly very glad I was never tempted to use Redbox.
Post #An31xNVpBk7OQFjcEy by [email protected]
0 likes, 0 repeats
@foone "hey let's use patterns like in school!"
Post #An33mC9LIHRPuA0vqa by [email protected]
0 likes, 0 repeats
@foone score!
Post #An34f5lcj3482L63TE by [email protected]
0 likes, 0 repeats
@gudenau yeah we've talked about that in the discord. We've compiled a …
Post #An377A08mCd9BYOm24 by [email protected]
0 likes, 0 repeats
@foone I now really want the forbidden knowledge of wheel of fortune’s bespok…
Post #An377A7ELqIlXXiR5E by [email protected]
0 likes, 0 repeats
@perplexes I'm still writing a disassembler, it'll be documented someday
Post #An39YWudttdRyF0OvY by [email protected]
0 likes, 0 repeats
@foone Reminds me of the time I asked #java what their equivalent of Python&#39…
Post #An3DaaRe8ce9K0gAE4 by [email protected]
0 likes, 0 repeats
@foone AmateurNewGradsAsAService
Post #An3E3Ri9glqQdHA6pk by [email protected]
0 likes, 0 repeats
@foone or maintained somebody else's code
Post #An3F7jDQeLMA2AObYG by [email protected]
0 likes, 1 repeats
@foone About the only way this whole shitshow could be worse would be: “use A…
Post #An3HyHdo6MNVlkvELw by [email protected]
0 likes, 1 repeats
@[email protected] love me some "military grade encryption" in my &…
Post #An3I3cs6atUR3x9p5s by [email protected]
0 likes, 1 repeats
@[email protected] BTW if you have a dump of the redbox device code somewhere…
Post #An3J85gvU8ApYecaJ6 by [email protected]
0 likes, 0 repeats
@froge I don't, but there is a dump of a drive of one in the discord. https…
Post #An3JpkBenac5bZoKtU by [email protected]
0 likes, 0 repeats
@foone … I regret to inform you that PCI is actually just find with that. The…
Post #An3Jvk3iBjIGwexF9k by [email protected]
0 likes, 0 repeats
So, quick summary:Redbox went bankrupt and the machines are getting in the hand…
Post #An3KEhoSlLr3Turfeq by [email protected]
0 likes, 0 repeats
the devices themselves are windows 7 machines talking to the disc library. It&#…
Post #An3KLg6TW6wwCsc9i4 by [email protected]
0 likes, 0 repeats
it's primarily written in enterprise-as-fuck C#, with some lua scripting, a…
Post #An3KPJlMWKLY4qTUB6 by [email protected]
0 likes, 0 repeats
I'm currently trying to acquire one so I can do more hands-on reverse engin…
Post #An3KSeM0Q63ko9CetU by [email protected]
0 likes, 0 repeats
and I'm told Doom has already been run on them. It's windows 7, it can …
Post #An3KVHzK23MQJHqrJ2 by [email protected]
0 likes, 0 repeats
@foone Ohhh I do love me an embedded scripting language. Do you know if there�…
Post #An3Kf6SPl3tXRa8g40 by [email protected]
0 likes, 0 repeats
MORE FUN FACTS: it turns out the device has a database on it which lists the lo…
Post #An3L33bzzMvFZL2nfk by [email protected]
0 likes, 0 repeats
@rk there's no info, but there are some samples. I don't have access to…
Post #An3L5XKcSkWaK265xo by [email protected]
0 likes, 0 repeats
@foone Beautiful, thank you!
Post #An3L7DUpBITzNnfiJE by [email protected]
0 likes, 0 repeats
@foone Doom when? 😁
Post #An3L7DfoWRGzvsoURE by [email protected]
0 likes, 0 repeats
@pawv it's been done! they're just windows machines so they can run doo…
Post #An3LVprGCj9TJHuB8q by [email protected]
0 likes, 0 repeats
@foone Encryption at rest is always that way though, whatever software is acces…
Post #An3MmFATyBqgOZHfTk by [email protected]
0 likes, 0 repeats
@foone @rk Why the fuck would you need a domain specific language for that bori…
Post #An3N5iACODnfpDQz6u by [email protected]
0 likes, 0 repeats
@elronxenu @rk I have no idea!
Post #An3OkNMKkCTj8343Cy by [email protected]
0 likes, 0 repeats
@foone this thread makes me feel a lot better about my code.
Post #An3QUotQo2dtnZFugS by [email protected]
0 likes, 1 repeats
@foone I’m just joining a C# project and SO MUCH THIS
Post #An3RJcgvvmJuizdPX6 by [email protected]
0 likes, 0 repeats
@foone so why did that error message ask you to dial a number then??
Post #An3SHTdMjfTg0ZVSgi by [email protected]
0 likes, 0 repeats
@foone Well... that's actually permitted, you can store no more than the fi…
Post #An3UsOf6Ns1dD83E36 by [email protected]
0 likes, 0 repeats
@foone https://botsin.space/@scream/113311204063728990
Post #An3ZFi4Cnpqjs4AI1A by [email protected]
0 likes, 0 repeats
@foone the java vibe is strong
Post #An3ZQZvfOnUxolLzHc by [email protected]
0 likes, 0 repeats
@foone oh god I wanna make a poster out of this toot
Post #An3ZZHg4cvsromD9wu by [email protected]
0 likes, 0 repeats
@sirmino go ahead!
Post #An3dob17PBkNxUbyjI by [email protected]
0 likes, 0 repeats
@foone Oh God yes. I was reading some code in a graphics project last night to …
Post #An3drN8rRu8jnJYag4 by [email protected]
0 likes, 0 repeats
@foone @rk I wonder if there's an item stuck in the gripper
Post #An3ffuuGHsfQwkOSi8 by [email protected]
0 likes, 0 repeats
@foone That's called masking and us actually perfectly allowed by PCI-DSS. …
Post #An3gWdDOnHlPQSTtFg by [email protected]
0 likes, 0 repeats
If you got here from hackernews, you can pay me here:https://ko-fi.com/foonetur…
Post #An3jWWW00JayVaoyoa by [email protected]
0 likes, 0 repeats
@foone OK but this is objectively awesome
Post #An3rpgJGbxbG1OVoLw by [email protected]
0 likes, 0 repeats
@foone Storing first 6 plus last four is common. https://d30000001huxdea4.my.sa…
Post #An47jbHM09fBwojuQS by [email protected]
0 likes, 0 repeats
@foone WHY does every company just store that data so unsecurely?
Post #An4FUAPMQKjftmdVzM by [email protected]
0 likes, 0 repeats
@foone An old random personal project of mine was recently at the top of the or…
Post #An4GNjURgulIdAVihU by [email protected]
0 likes, 0 repeats
@foone Please write about the wheel of fortune language, and why you think they…
Post #An4HIqZW29ol6J7GiW by [email protected]
0 likes, 0 repeats
@foone @elronxenu @rk And why they needed a new one when they already had Lua i…
Post #An4N0CE3ts0UTxZTs0 by [email protected]
0 likes, 0 repeats
@foone The big surprise there is apparently 250 rentals a year is a viable mach…
Post #An4QYrXb67e0KKvlDc by [email protected]
0 likes, 0 repeats
@foone The Giver and The Maze Runner? I feel sorry for them already.
Post #An4R69KA07Hx2MWApU by [email protected]
0 likes, 0 repeats
@foone Jesus.
Post #An4XVE3O9Z3Gfb0uA4 by [email protected]
0 likes, 0 repeats
@foone evil. evil evil evil
Post #An4Y4zKONexJQL1Hxg by [email protected]
0 likes, 0 repeats
@[email protected] what ze hell
Post #An4cYDQNRsYHMG0laC by [email protected]
0 likes, 1 repeats
@foone Christ that looks like COBOL without the periods
Post #An4hu2vZeicgwbpfxQ by [email protected]
0 likes, 0 repeats
@foone @rk "Win one for the Gripper."--Knute Rockne, tangentially htt…
Post #An4k98HMF2gRnFLKaG by [email protected]
0 likes, 0 repeats
@kasperd good lord!
Post #An5cgWTUhMNNurOGf2 by [email protected]
0 likes, 0 repeats
@foone slightly surprising they didn't at least use an ATA password on thei…
Post #An5cgWc0BjBKLFN3vE by [email protected]
0 likes, 0 repeats
@wyatt8740 it wouldn't have stopped anything: the machine has to boot witho…
Post #An5ciyBKegAEQY3uSG by [email protected]
0 likes, 0 repeats
@foone ah so it is encrypted at least. ok.
Post #An5ciyHMIGz6jEsiqe by [email protected]
0 likes, 0 repeats
@wyatt8740 no, it's not. I'm just saying that the way we got the data, …
Post #An6ZPV5eUHelzjOEhk by [email protected]
0 likes, 0 repeats
@foone I'm kinda feeling like that is pretty good security if the machine s…
Post #An6ZPVDS1HtYNv2SrQ by [email protected]
0 likes, 0 repeats
@highvizghilliesuit you have a point
Post #An73qDTf4nxDoUH8T2 by [email protected]
0 likes, 0 repeats
@foone Found this articlehttps://arstechnica.com/gadgets/2024/10/redbox-hard-dr…
Post #An73qDf0Od1oNfaC9I by [email protected]
0 likes, 0 repeats
@the5thColumnist that article links back to this thread!
Post #AnBrGR96YKna7XdGPw by [email protected]
0 likes, 0 repeats
@foone Appreciate your research, but I'm not worried about someone discover…
Post #AnDtamP3ogYU46qLey by [email protected]
0 likes, 0 repeats
@gabe @foone What about using IRC for IPC?
Post #AnDtamXDKN4qTOerMu by [email protected]
0 likes, 0 repeats
@montar @gabe I made a game that did that once.You moved around a maze and thre…
You are viewing proxied material from pleroma.anduin.net. The copyright of proxied material belongs to its original authors. Any comments or complaints in relation to proxied material should be directed to the original authors of the content concerned. Please see the disclaimer for more details.