• 0 Posts
  • 52 Comments
Joined 6 months ago
cake
Cake day: January 16th, 2024

help-circle

  • I remember getting sent to the principals office for “hacking” (pinging the computer in the next room) in like 8th grade.

    Back in 4th/5th I actually was hacking, modifying our user menu to add Windows 3.1 and a password (copying config from a teacher’s profile). Also brute-forced at least two teachers passwords.

    I’m a network architect now, so there’s that.








  • As a network guy…open up your favorite web-managed application and open the developer console. Inspect the transactions you see and compare it to the applications REST API reference, and you’ll likely find a lot of commonality (and maybe some undocumented endpoints!).

    Backend made the API and everything that is performed by it. Front end is doing the GUI based off the response and promoting for input.






  • Sure, they can you on, but which patron is the real patron?

    Suppose the ticket was supplied as a PDF. Then it is either in the users Downloads directory or in their email. If that PDF is obtained by a malicious actor, it could be resold countless times. You could have 100 “guests” arrive at a venue with a bogus ticket but only the first one gets in, because they were scanned. That first person may not be the legitimate ticket owner.

    Now, if your using their app, they usually put an animation over the barcode, and the gate attendants know to look for that. If that animation isn’t there, don’t scan. Pretty simple instructions to give to anyone. And accessing the app likely requires logging in, probably with some form of MFA (though probably SMS), so it gets a lot more difficult to rip off both the legitimate users and Ticketmaster in this way.

    I don’t like having to use a specific app for things like this, but “I kinda get it”.

    Now, it’d be better if we had a universal standard format for putting secure, validated passes into the native phone app. Perhaps registering your device to your account via their website, then only allowing the ticket to be installed on one device. I’m sure there’d be more to it, im just spitballing.


  • Right?

    Like, I get it Nintendo, you want money. That’s understandable.

    Then let me buy the damn games. I’d love to be able to buy roms to run in an official emulator, or ideally any emulator.

    Honestly at this point why even bother with DRM. The roms for classic systems are absurdly easy to get. Hell even switch roms. But Nintendo insists the only way to play retro games legitimately is to buy either a monthly subscription, or a copy of the rom bundled with the official emulator that can only be run on that specific generation console, or buy dedicated system for it.

    And even then its only the games they put out on the system/marketplace/subscription service. A tiny fraction of the library.