All iPhone 2G, 3G and 4 are all vulnerable to root code execution flaws (some exploitable from the web browser) and do not receive updates.
523 karma · joined May 12, 2015
All iPhone 2G, 3G and 4 are all vulnerable to root code execution flaws (some exploitable from the web browser) and do not receive updates.
There's supposed to be a web interface[0] that looked significantly better but I don't think that ever went anywhere (last commit is in 2013).
[0]: https://retroshareteam.files.wordpress.com/2013/04/djrs_2013...
Beyond that (imagining you somehow eliminated all of those) the biggest source of radio frequency garbage is going to be from space rather than a consumer grade <1W transmitter, the atmosphere is pretty opaque to 2.4GHz. Somewhat coincidentally the cosmic noise we can hear from earth is mostly in the microwave range.
Maybe if people's skulls started vibrating in time with the woodpecker [0] or something I'd believe it.
if ( password = "hunter2" ):
return True
This in a lot of cases will be vulnerable to a timing attack. If the user submits the password "huntducks" it will take the function momentarily longer to return than if they had submitted "whalehorn", due to the underlying comparison exiting at the first non-match. With a bit of trial and error they can deduce the password one character at a time by altering their guess to take longer and longer to execute. To avoid this security sensitive code needs to be time constant, which is a lot harder than you'd imagine.Attacks like the author are performing are a lot more complicated and use tricks like coercing the victim into signing distinctive plaintexts, but the example also works for more complex systems like ECDSA where people can derive the signing key by just knowing how long it took.
One site that still has me beat dynamically loads all of the content and code through a websocket, and various bits are so heavily obfuscated that they look like brainfuck. Finding tools to tamper with SSL websockets is a challenge enough in its own right (Chrome has nicer tools now though).