How I accidentally breached a nonexistent database and found every private key in a 'state-of-the-art' encrypted messenger called Converso.
  • Namstel@programming.devEnglish
    0·
    1 year ago

    Thanks for sharing. Such an interesting read. I’ve read many times about databases being exposed publicly, but when a company explicitly states they are using state of the art security and drag other companies through the mud… Man, that really takes the cake.

    I shudder to think what it must be like to be a developer there, knowing they’re lying so blatently.

    • Threen@aussie.zoneOPEnglish
      0·
      1 year ago

      In the timeline at the bottom it says:

      2023-05-05: Converso asks: ‘How were you able to decompile the source code of the app and what do you think should be done to protect against that in the future?’

      So I think some of the devs were in way over their heads too!

      • Kempeth@feddit.deEnglish
        0·
        1 year ago

        The fundamental problem with cryptography is that it’s significantly harder to create a system that others can’t crack than to create a system that you yourself can’t crack.