Show HN: ShadowCat – file transfer through QR Codes in a Browser
31–40 of 74 posts
Re: Show HN: ShadowCat – file transfer through QR Codes in a Browser
#32https://gist.github.com/SMUsamaShah/fd6e275e44009b72f64d0570...
very nice list! Can I suggest adding my https://phntm.sh as well? itis a zero-knowledge file transmission system.
Re: Show HN: ShadowCat – file transfer through QR Codes in a Browser
#33Let Ai help you research not write keeps the content human and original
Re: Show HN: ShadowCat – file transfer through QR Codes in a Browser
#34[flagged]
Re: Show HN: ShadowCat – file transfer through QR Codes in a Browser
#35I once heard someone create a QR code scanner to retrieve gigabytes of data, but the biggest problem is that cameras aren't powerful enough to handle it all. Essentially, the QR code needs to be downloaded to the device for loading; relying on the camera to retrieve it is very difficult. Am I wrong about this project? What's your solution?
You could also do it the menial way; create multiple QR codes that can connect together. Not very practical for everyone except the very-motivated.
Re: Show HN: ShadowCat – file transfer through QR Codes in a Browser
#36I once heard someone create a QR code scanner to retrieve gigabytes of data, but the biggest problem is that cameras aren't powerful enough to handle it all. Essentially, the QR code needs to be downloaded to the device for loading; relying on the camera to retrieve it is very difficult. Am I wrong about this project? What's your solution?
Why not record with a standard high quality webcam and do the QR processing later? That’s how I would exfiltrate a large volume of data.
Re: Show HN: ShadowCat – file transfer through QR Codes in a Browser
#37Single page file transfer using QR Codes and a browser. Sending device loads a file into the page, gets chunked. Receiver gets all the chunks through a camera, tosses lightly and reassembles, CRC to garnish. Designed to push data from an old phone that had broken comms after it took a swimming lesson in a coffee mug, it's been quite handy.
If the phone had broken comms, how did you get the code onto the phone to run?
In ye olden days we used cables to sync all of our apps and data to our phones.
Re: Show HN: ShadowCat – file transfer through QR Codes in a Browser
#38I've done this exact approach before. It's a good way to exfiltrate data. Post the software on GitHub pages, or a popular CDN that co-hosts other shared libraries and you've got a very difficult to block method. Really goes to show that it's very difficult to stop a motivated and informed actor.
If you can connect to Github pages couldn't you exfil that way? This takes 2 mins for 100KB.
Not quietly. Uploads are commonly monitored by data loss prevention (DLP) solutions, especially when MITM is being used for corporate proxy.
Downloading a tiny JS from a CDN, or accessing a GitHub page is mostly noise, especially if obfuscated well.
Re: Show HN: ShadowCat – file transfer through QR Codes in a Browser
#39I've done this exact approach before. It's a good way to exfiltrate data. Post the software on GitHub pages, or a popular CDN that co-hosts other shared libraries and you've got a very difficult to block method. Really goes to show that it's very difficult to stop a motivated and informed actor.
Npm install qr-made-up-name Can show qr in console. How do you stop that?
I'm likely being overly specific, but blocking npm downloads, installation on corporate devices, etc is trivial in a restrictive corporate environment.
Re: Show HN: ShadowCat – file transfer through QR Codes in a Browser
#40Earlier quoted context omitted.
If the phone had broken comms, how did you get the code onto the phone to run?
In ye olden days we used cables to sync all of our apps and data to our phones.
But why not move the data over that cable? Some kind of iOS thing that made that more complicated than pushing an app to the phone?