Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Using Hinge as a Command and Control Server

mattwie.se

Post reply on HN
Print view View original

41–50 of 71 posts

Re: Using Hinge as a Command and Control Server

#41

Post by fragmede »

stackghost wrote: post #27
kneel25 wrote: post #26

Earlier quoted context omitted.

I envy the fact you had to google it

Again, why? Nothing on its wiki article or the first page of Google results suggests it should be a household name. So unless the default assumption is that everyone on HN is dating (I'm married) I genuinely don't understand why it's weird to not have heard of some random ass dating app

Even if you're married, you've got to know somebody who isn't. It's like referring to Google as "some random ass search engine website" and wondering why people think you're the weird one.

Re: Using Hinge as a Command and Control Server

#42

Post by richbell »

lisbbb wrote: post #35
litheon wrote: post #4

Earlier quoted context omitted.

Command and Control Server (C2) refers to the infrastructure required to command and control malware of various forms. The author basically found a creative use of Hinge’s infrastructure and proved it could be used to control malware.

But the malware was encoded as an image, how is it runnable on the target's smartphone?

The purpose of command and control servers is to send and receive data to victims devices.

A secondary goal is to do so while evading detection. This is why many threat actors piggy-back off of legitimate services, it disguises the malware communications and avoids directly exposing the upstream C2 instance.

Re: Using Hinge as a Command and Control Server

#43

Post by Imustaskforhelp »

mattwiese wrote: post #36
Imustaskforhelp wrote: post #29

Earlier quoted context omitted.

Hey I actually created something like this when I was once curious. Its called nanotimestamps I found it when I realized that nano had 0 fees and I realized that by using a nano vanity address generator, I can embed data into a series of transactions and then basically embed data into the chain (for free) since there is 0 gas fees Now I created it as a way of getting timestamps of any data onto the chain but you can…

Cool! I wasn't aware of nano; your point about the gas fees is really compelling, as there's a lot of stuff I've wanted to try building on Ethereum et al that I just haven't done because I can't get over the hurdle of paying transaction costs lol. Is this you? https://github.com/Koeng101/nanotimestamps > also even if I like the tech, I think that crypto's fundamentally really really volatile and I prefer things like…

> Is this you? https://github.com/Koeng101/nanotimestamps

No its not, I have the domain nanotimestamps.org but its not really doing much (its called laziness from my side)

https://github.com/SerJaimeLannister/nanotimestamp/blob/main...

Here you go! (the video starts as a gif but there is also a .mp4)

Ended up finding that the best way to upload videos is probably github wiki pages

https://github.com/SerJaimeLannister/nanotimestamp/wiki

So let me know how you like this project, Y'know making this project had to make me build some abstractions which you might be interested to look at as well and could be used for multiple purposes.

Create an issue in my github repo if you want to talk to me if you have any questions as well and I would love to answer there and here as well if you wish! Glad my project could be of interest to ya! If you have any use cases for my project, then let me know as well

have a nice day! Looking forward to talk to ya

Re: Using Hinge as a Command and Control Server

#44

Post by Imustaskforhelp »

mattwiese wrote: post #40
ryanjshaw wrote: post #37

Earlier quoted context omitted.

If you want the Ethereum VM but with lower tx costs, try one of the L2s.

Any L2 you'd recommend? The last time I dipped my toe in that world I only bothered with L1s like Ethereum, Solana, etc.

If you are interested in cheap L1's which aren't restricted like nano, I can recommend stellar, (sei?) etc. although these are L1's

If you are interested in L2's, polygon's cheap as well fwiw

Re: Using Hinge as a Command and Control Server

#45

Post by Imustaskforhelp »

mattwiese wrote: post #36
Imustaskforhelp wrote: post #29

Earlier quoted context omitted.

Hey I actually created something like this when I was once curious. Its called nanotimestamps I found it when I realized that nano had 0 fees and I realized that by using a nano vanity address generator, I can embed data into a series of transactions and then basically embed data into the chain (for free) since there is 0 gas fees Now I created it as a way of getting timestamps of any data onto the chain but you can…

Cool! I wasn't aware of nano; your point about the gas fees is really compelling, as there's a lot of stuff I've wanted to try building on Ethereum et al that I just haven't done because I can't get over the hurdle of paying transaction costs lol. Is this you? https://github.com/Koeng101/nanotimestamps > also even if I like the tech, I think that crypto's fundamentally really really volatile and I prefer things like…

Oh yeah another point, see my other comment as well but if you need to start with nano, all you need is a faucet which you can get for literally free and that's all you need for you to experiment with my project.

You really don't need to spend any money at all and that's actually how I built it. I recommend you to contact me if you wish to run it locally for experiments purposes as it requires bao and nano-vanity-generator, you can take the look at the code

Also I would like to disclose that the code is AI generated. I have no expertise in this field but I found this idea fascinating and saw nobody doing it so did it. But still, I am just proud of my idea and I get good reception whenever I mention this idea (which is quite a lot, tbh I am proud of it a little) so yeah, I love talking about this project's idea fascinating as well and I have expanded upon this work privately to even build ways of creating ones own tokens on top of nano etc. but creating wallet etc. and more abstractions felt wrong and I just wanted to prove it was possible

To be honest, you creating a c2 server on hinge was similar to this feeling of "proving" as well.

To me, its just that if I can prove something, then I can figure out the practical uses of it later (like discussing it right now) etc.

I guess we both are similar in the "proving" way reading your article which is nice to hear, Let me know if you have any questions as I would love to answer!

Re: Using Hinge as a Command and Control Server

#46

Post by 1shooner »

stackghost wrote: post #25
fuzzer371 wrote: post #11

Earlier quoted context omitted.

[flagged]

Apparently I have. Is this particular dating app particularly noteworthy?

The Hinge app I know of is from my healthcare provider, and reminds me to do stretches. It also has a pretty great TENS device peripheral. I wouldn't expect young single people to know about that app, because it serves a different demographic.

Re: Using Hinge as a Command and Control Server

#47

Post by stackghost »

fragmede wrote: post #41
stackghost wrote: post #27

Earlier quoted context omitted.

Again, why? Nothing on its wiki article or the first page of Google results suggests it should be a household name. So unless the default assumption is that everyone on HN is dating (I'm married) I genuinely don't understand why it's weird to not have heard of some random ass dating app

Even if you're married, you've got to know somebody who isn't. It's like referring to Google as "some random ass search engine website" and wondering why people think you're the weird one.

Ok

Re: Using Hinge as a Command and Control Server

#48

Post by [deleted] »

Sytten wrote: post #33
stackghost wrote: post #27

Earlier quoted context omitted.

Again, why? Nothing on its wiki article or the first page of Google results suggests it should be a household name. So unless the default assumption is that everyone on HN is dating (I'm married) I genuinely don't understand why it's weird to not have heard of some random ass dating app

Because it used to be the "best" dating app out there for "serious" people wanting long term relationships. Now all the apps are trash and have predatory monetization.

[deleted]

Re: Using Hinge as a Command and Control Server

#49

Post by qingcharles »

Imustaskforhelp wrote: post #44
mattwiese wrote: post #40

Earlier quoted context omitted.

Any L2 you'd recommend? The last time I dipped my toe in that world I only bothered with L1s like Ethereum, Solana, etc.

If you are interested in cheap L1's which aren't restricted like nano, I can recommend stellar, (sei?) etc. although these are L1's If you are interested in L2's, polygon's cheap as well fwiw

+1 for Polygon. Very cheap.

Re: Using Hinge as a Command and Control Server

#50

Post by qingcharles »

Imustaskforhelp wrote: post #30
octoberfranklin wrote: post #16

Earlier quoted context omitted.

They don't let you upload facefusion videos. The video has to come from the front-facing camera on a phone. There is an extremely profitable company (whose data hoard keeps geting hacked but why should they care?) built around this: https://www.au10tix.com/ Most apps use device attestation (derived from secure boot) to make sure the video stream is really coming from a front-facing camera on a physical device. If Hin…

Can someone not just have an additional device and play a video on top of it? Fundamentally no amount of front facing camera on a physical device or other shenanigan a company might do can really do anything about it?

Front-facing paired with IR depth map would map it an order of magnitude harder, but I don't know what the standards are around that or what the installed base is on Android.
Post reply on HN