Eugène Fitzerberg

Hacking the #EU #AgeVerification app in under 2 minutes. During setup, the app asks you to create a PIN. After entry, the app *encrypts* it and saves it in the shared_prefs directory. 1. It shouldn't be encrypted at all - that's a really poor design. 2. It's not cryptographically tied to the vault which contains the identity data. So, an attacker can simply remove the PinEnc/PinIV values from the shared_prefs file and restart the app. After choosing a different PIN, the app presents credentials created under the old profile and let's the attacker present them as valid. Other issues: 1. Rate limiting is an incrementing number in the same config file. Just reset it to 0 and keep trying. 2. "UseBiometricAuth" is a boolean, also in the same file. Set it to false and it just skips that step. Seriously @vonderleyen - this product will be the catalyst for an enormous breach at some point. It's just a matter of time.

Lohen: Sharpened Arrowhead Vice Captain of the Knights of Favonius Ranged Company #GenshinImpact #Lohen Although Lohen is the vice captain of the ranged company, he rarely uses his bow. Those who travel with him for the first time are always struck by this: while his teammates are still forming up in the rear with crossbows and muskets, the young knight — who should be taking cover — has already charged past the line, spear in hand, meeting the most dangerous enemies head-on. Knights who asked the members of the ranged company why Lohen did this usually received two answers: As long as he stands on the front line, no enemy can get close, and everyone else can confidently provide fire support. And when he charges forward, no enemy can hold their position — he becomes the sharpest arrow in the entire company. When asked, Lohen himself gave a simple answer: "Most of the time, stabbing with my spear is faster and more accurate than firing an arrow." To Lohen, there is no such thing as a superior weapon or tactic — only what works best. If the situation calls for a hidden shot, he uses a bow. If it calls for a direct strike, he takes up his spear. Though nothing quite compares to the feel of a spear tip piercing through armor, efficiency always comes first. Ambushes, poison, surprise attacks, infiltration... So long as they secure victory, he makes full use of them all. It's just that when he needs to strike from the shadows, he tends not to leave any witnesses. Because of this, the image most people have of him is a fleeting figure on the battlefield — rushing forward with weapon in hand, swift and unrelenting. Like an arrow or a bullet tearing through the air, only deadlier, and far harder to evade.