Posts

Showing posts with the label Spying Software

OnePlus found secretly spying on it’s users and here is how to remove the spying software

-
Image
Christopher Moore, a software engineer, began a post on his own blog showing his findings. During a Hack Challenge, Moore began proxying the internet traffic of his OnePlus 2 using OWASP ZAP. If you’re not close to this process, this actually allowed him to view all incoming and outgoing internet traffic from his phone. Among the normal network activity, he noticed a lot of requests to open.oneplus.net. Through extensive inspection, he found the field name to be an Amazon AWS instance owned by OnePlus. he could see his phone sending data periodically to the open.oneplus.net server over HTTPS. He was able to decrypt the data using the authentication key on the phone which showed that his OP2 was sending time-marked information about locks, unlocks, and unexpected reboots. Logging sudden reboots would make sense it could help developers fix OS bugs, but as Moore wrote in his blog, recording every time the phone is opened or locked seemed excessive. He left the proxy command...
Post a Comment
Read more

Popular posts from this blog

How to Secure Session Management in Node

-
In a web application, data is transferred from a browser to a server over HTTP. In modern applications, we use the HTTPS protocol, which is HTTP over TLS/SSL (secure connection), to transfer data securely. Looking at common use cases, we often encounter situations where we need to retain user state and information. However, HTTP is a stateless protocol. Sessions are used to store user information between HTTP requests. We can use sessions to store users' settings like when not authenticated. Post authentication sessions are used to identify authenticated users. Sessions fulfill an important role between user authentication and authorization. Exploring Sessions Traditionally, sessions are identifiers sent from the server and stored on the client-side. On the next request, the client sends the session token to the server. Using the identifier, the server can associate a request with a user. Session identifiers can be stored in cookies, localStorage, and sessionStorage. Session identi...
Read more

Angular 9 - User Registration and Login Example & Tutorial

-
Image
In this tutorial we'll go through an example of how to build a simple user registration, login and user management (CRUD) application with Angular 9. The project is available on GitHub at  https://github.com/cornflourblue/angular-9-registration-login-example . The Angular CLI was used to generate the base project structure with the  ng new <project name>  command, the CLI is also used to build and serve the application. For more info about the Angular CLI see  https://angular.io/cli . Styling of the example app is all done with Bootstrap 4.4 CSS, for more info about Bootstrap see  https://getbootstrap.com/docs/4.4/getting-started/introduction/ . Here it is in action:   (See on StackBlitz at  https://stackblitz.com/edit/angular-9-registration-login-example ) Running the Angular 9 Login Tutorial Example Locally Install NodeJS and NPM from  https://nodejs.org . Download or clone the Angular project source code from  https:...
Read more

How to download a file using command prompt (cmd) Windows?

-
Image
If you’re like most Internet users, you download various types of files now and then. You either download these files with your web browser or some download manager software. Have you ever considered downloading files using the command prompt i.e. CMD? If not, we recommend you to try it. It’s quite interesting apart from being very useful as well. In this article, we’ll show you how to download a file using command prompt aka CMD. How to download a file using command prompt?   There are several useful commands for the Command Prompt and one of them is  bitsadmin . Though bitsadmin has several uses, here we shall limit this article to its role in downloading files only. If you want to read the details about bitsadmin syntax, continue reading this section. Otherwise, you can scroll down to the next section –  Downloading a file .   The syntax of bitsadmin is : BITSADMIN [/RAWRETURN] [/WRAP | /NOWRAP] command   As you know, the parts of the syntax inside ...
Read more