oooh, the redbox uses full AES encryption!
-
they wrote their code as a fuckton of C# services that are always HTTP POSTing at each other
-
@foone real question : if your code contain a function that use AES to encrypt data, where do you put the key ? because the AES function will need the key as input, so you need to have it stored in your source code somewhere ? right ?
-
HTTP is, as always, the poor man's IPC
-
@Fangh you shouldn't put it in the source at all! it should be stored elsewhere, and loaded at runtime. or it shouldn't be loaded at all, and is stored inside a TPM or similar
-
@foone look for CORBA
-
@foone cowards.
SMTP is the superior choice.
-
@petrillic @foone WSDL is just round the corner!
-
@piofthings @petrillic oh god I used to do WSDL stuff when I was doing soap for the US government all in java.
it was so fucking enterprise
-
Foone🏳️⚧️replied to Foone🏳️⚧️ last edited by [email protected]
they logged the first six digits and last 4 digits of every credit card transaction.
HAVE YOU EVEN HEARD OF PCI?
Edit: this is technically allowed by PCI.
-
1234 56## #### 7890
can I buy a vowel?
-
I'm trying to tar up a redbox install and upload it, but each time the tar gets past 50% we find another file with PII in it
-
@foone wait is this redbox as in those movie rental kiosks
-
@lyncia as in those former movie kiosks, yes.
-
You're telling me!
-
Medea Vanamonde🏳️⚧️ ♀replied to Foone🏳️⚧️ last edited by
@foone you got one?
-
OH HEY BAD NEWS:
when someone opens up the hard drive of a redbox unit, they can pull a file which has a complete list of titles ever rented, and the email addresses of the people who rented them, and where and when
-
DJ Sundog - from the toot-labreplied to Foone🏳️⚧️ last edited by
@foone there's probably a german word for the combination of "big oof" and "as could be expected" but damned if I know what it is, but that, that's the vibe
-
@foone huh. That feels like it should be illegal but somehow isn’t. The government *requesting* that data absolutely is…
-
@foone Rented from that unit or from any unit? Either way that doesn’t seem good
-
@h0m54r just from that unit.
