31–40 of 121 posts
Earlier quoted context omitted.
Cookies must be enabled... APK to install... Does curiosity really make ya'll this dumb?
Level 1: The people who just go to the site/download the APK Level 2: The people who realize that the requested actions are likely unsafe, and complain about it Level 3: People who realize that this is part of the challenge and just use a VM Nobody on HN is "this dumb", if you want to participate in a challenge with an intelligence agency , take the proper precautions
Enjoy your challenge.
Earlier quoted context omitted.
Challenge is obviously meant to be reversing, not installing.
If you deconstruct the APK, you'll find a C script that prints a message - "You really think it was the Saudis? :)" /s
package com.iwalk.locksmither;
import android.os.Bundle; import io.flutter.app.FlutterActivity; import io.flutter.plugins.GeneratedPluginRegistrant;
public class MainActivity extends FlutterActivity { protected void onCreate(Bundle savedInstanceState) { super.onCreate(savedInstanceState); GeneratedPluginRegistrant.registerWith(this); } }
In terms of permissions, it asks for INTERNET.
Earlier quoted context omitted.
view page source mr hackerman
If I need to read the source code of a fucking website for it to be useful, then it's either a really special edge-case or the designer is a moron. Guess which case this is. Why not upload a plain text file in the first place?
Bingo!
Earlier quoted context omitted.
If you're dumb enough to do that... maybe they blacklist you from their recruitment efforts moving forward. You could always install it on a virtual phone in a sandboxed VM.
What do you do if they have sandbox escapes you don't know about? The kind of person that runs it in a VM is someone they'd probably want to be looking at. Paranoia++ :)
Earlier quoted context omitted.
What do you do if they have sandbox escapes you don't know about? The kind of person that runs it in a VM is someone they'd probably want to be looking at. Paranoia++ :)
Download to a burner machine, then airgap it by removing/disabling all networking hardware, inside a room with no other computers. ;)
Earlier quoted context omitted.
Level 1: The people who just go to the site/download the APK Level 2: The people who realize that the requested actions are likely unsafe, and complain about it Level 3: People who realize that this is part of the challenge and just use a VM Nobody on HN is "this dumb", if you want to participate in a challenge with an intelligence agency , take the proper precautions
The majority of the population is Level 1. Consider what that means for Mossad. Enjoy your challenge.
Yes, and those people might visit a website, which asks for...shudder...cookies. If you can show that the cookies do something nefarious, I'd be interested. Do you think they general population would even get to the point of installing an APK?
"Consider what that means for Mossad"
At this point, you can't even prove that the APK does anything nefarious - and it would be dangerous for the Mossad if it did, because the challenge is literally to decompile the APK.
Earlier quoted context omitted.
If you deconstruct the APK, you'll find a C script that prints a message - "You really think it was the Saudis? :)" /s
So far I've just used those decompile services online and it seems it's Flutter package com.iwalk.locksmither; import android.os.Bundle; import io.flutter.app.FlutterActivity; import io.flutter.plugins.GeneratedPluginRegistrant; public class MainActivity extends FlutterActivity { protected void onCreate(Bundle savedInstanceState) { super.onCreate(savedInstanceState); GeneratedPluginRegistrant.registerWith(this); } }…
Earlier quoted context omitted.
If you deconstruct the APK, you'll find a C script that prints a message - "You really think it was the Saudis? :)" /s
So far I've just used those decompile services online and it seems it's Flutter package com.iwalk.locksmither; import android.os.Bundle; import io.flutter.app.FlutterActivity; import io.flutter.plugins.GeneratedPluginRegistrant; public class MainActivity extends FlutterActivity { protected void onCreate(Bundle savedInstanceState) { super.onCreate(savedInstanceState); GeneratedPluginRegistrant.registerWith(this); } }…