evilsocket

thanks for the great feeedback! i'll treasure your words :)

maybe I tried and it didn't work?

oh come on! it doesn't hurt smiling a little bit from time to time you know? :)

mmm would you please elaborate?

^ THIS ^

I don't see how publishing a research without disclosing specific details about the app itself or any kind of "crack" could stomp on motivation to develop something ... unless you trust in "security through obscurity" of course ... which was proven more than once to be a fail :)

my point is that it's quite easy to "play" with such things without actually breaking the law

never heard about faraday cages?

absolutely agree, while writing the post I gave for granted that ppl realized how illegal this is and take appropriate measures.

wow thanks! :)

i see, well that's the default behaviour ... apparently js is not optional for that theme, im sorry :)

no offence taken at all :D and I totally agree with you, that's why it's so important to share old tricks despite their simplicity :)

good point although the post is just a simple PoC ... to fool the kind of behaviour you're talking about, one could simply install a signal handler, call the fake function, handle the sigsegv or whatever, and then use the function as data ... also, since ARM instrutions are 4 bytes each, you could play with 3 bytes declaration ... funny things happen ;)

Mr Clean lookalike here :D Do you have any specific navigation problem on the website? i recently switched to a new blog theme, maybe it's that?

more than 15 yr experience actually, I just thought that sharing some simple tricks would be a good thing

EXACTLY :D

author here ... it's not THAT easy, that specific piece of code was highly obfuscated by proguard ( you know the a.class, b.class, c.class thing? XD ) and everything made me think about the "correct" algorithm, still I can't find where that 0xFF... is being set :P

yep, android phone ( nexus 5 ) and some hci bluetooth sniffing on a nexus 4 ( you can enabled it on 4.4.4 under dev settings panel )

I'm seriously thinking about buying/building one of those

yeah I thought about physical sniffing and wanted to buy/build a bt sniffer myself ... but you know, some Android versions have a builtin bt sniffing feature ;)

I have a lawyer who can manage this thing, it's just not worth it. Regarding the grammar, English is not my native language (although this is not an excuse of course).

good point

"the project only income", I have a job

thanks for your effort, but trust me he's not worth it :)

that's life I suppose, fortunately I have a job :)

I should change the whole website purpose :)

and then what? what should I achieve with that ?

probably

you know, sometimes I'm maybe a little naive