| 00:02.42 | *** join/#maemo parazyd (~parazyd@devuan/developer/parazyd) |
| 01:04.35 | *** join/#maemo eMHa_ (~mh@p200300CFA71B2B000A0027FFFE3269DC.dip0.t-ipconnect.de) |
| 01:23.56 | *** join/#maemo tm (~sinnlos@unaffiliated/tm) |
| 05:16.18 | *** join/#maemo Kilroo (~Kilroo@173.94.24.151) |
| 05:59.44 | *** join/#maemo AndrewX192 (~andrew@unaffiliated/andrewx192) |
| 07:20.04 | *** join/#maemo florian_kc (~florian_k@Maemo/community/contributor/florian) |
| 07:57.50 | *** join/#maemo florian_kc (~florian_k@Maemo/community/contributor/florian) |
| 07:58.57 | *** join/#maemo Pali (~pali@Maemo/community/contributor/Pali) |
| 08:31.42 | *** join/#maemo pagurus (~user@i59F7A373.versanet.de) |
| 08:36.56 | *** join/#maemo florian_kc (~florian_k@Maemo/community/contributor/florian) |
| 08:50.11 | *** join/#maemo mp107 (~mp107@PC-109-125-232-42.wegrow.domtel.com.pl) |
| 09:10.20 | *** join/#maemo florian_kc (~florian_k@Maemo/community/contributor/florian) |
| 09:18.54 | *** join/#maemo florian_kc (~florian_k@Maemo/community/contributor/florian) |
| 09:27.22 | *** join/#maemo florian_kc (~florian_k@Maemo/community/contributor/florian) |
| 10:25.31 | *** join/#maemo hurrian (~hurrian@unaffiliated/rikanee) |
| 10:27.15 | *** join/#maemo jskarvad (~jskarvad@redhat/jskarvad) |
| 10:51.43 | *** join/#maemo yosafbridge (~yosafbrid@68.ip-149-56-14.net) |
| 11:04.50 | *** join/#maemo Oksana (~Wikiwide@Maemo/community/ex-council/Wikiwide) |
| 11:41.54 | *** join/#maemo Kabouik (~kabouik@2a01cb008023010094ce3e4639dff0fa.ipv6.abo.wanadoo.fr) |
| 11:45.35 | *** join/#maemo troulouliou_div2 (~troulouli@unaffiliated/troulouliou-div2/x-0271439) |
| 11:57.17 | *** join/#maemo cyteen (~cyteen@cyteen42.plus.com) |
| 12:30.38 | *** join/#maemo eMHa__ (~mh@p5DCAB970.dip0.t-ipconnect.de) |
| 12:56.44 | *** join/#maemo florian (~florian_k@Maemo/community/contributor/florian) |
| 13:42.01 | *** join/#maemo florian (~florian_k@Maemo/community/contributor/florian) |
| 14:15.39 | *** join/#maemo saidinesh5 (~quassel@minad.de) |
| 14:38.18 | *** join/#maemo Natch (~Natch@h-112-130.A444.priv.bahnhof.se) |
| 15:12.16 | sicelo | interesting 'authentication' schemes used by our two mobile ISPs for their balance check apps. the one uses an IP address in the range 10.0.0.0/8, and with the correct API call, the verification code is sent to the user via SMS, and at the same time, also returned in the JSON response (which the average joe won' see, of course) |
| 15:12.57 | sicelo | this has the side effect that you can just view anyone's balances since you have the verification code anyway, without having access to the SMS |
| 15:15.47 | sicelo | the 2nd ISP uses HTTPS (as opposed to HTTP-only for the first one) and the app needs to get a verification token generated by the server after you provide the correct code sent via SMS. The one thing with this ISP is that the token never changes for any given number, even though the SMS codes change. So if you can find the token just once, you have lifetime access to that account |
| 15:16.23 | sicelo | anyway, i guess reading people's balances is not that much of an issue. |
| 15:54.19 | *** join/#maemo chainsawbike (~chainsawb@unaffiliated/chainsawbike) |
| 15:55.08 | *** join/#maemo florian_kc (~florian_k@Maemo/community/contributor/florian) |
| 15:56.18 | *** join/#maemo saidinesh (~quassel@minad.de) |
| 16:13.33 | *** join/#maemo florian (~florian_k@Maemo/community/contributor/florian) |
| 16:25.12 | *** join/#maemo nslu2-log_ (~nslu2-log@23.141.224.193) |
| 17:35.09 | *** join/#maemo Kilroo (~Kilroo@173.94.24.151) |
| 17:50.50 | *** join/#maemo troulouliou_div2 (~troulouli@unaffiliated/troulouliou-div2/x-0271439) |
| 18:40.00 | *** join/#maemo troulouliou_div2 (~troulouli@unaffiliated/troulouliou-div2/x-0271439) |
| 18:42.19 | *** join/#maemo saidinesh5 (~quassel@minad.de) |
| 19:49.08 | *** join/#maemo florian_kc (~florian_k@Maemo/community/contributor/florian) |
| 21:01.05 | *** join/#maemo DarthVader_R2D2 (~user@ip-213-127-1-162.ip.prioritytelecom.net) |
| 21:01.32 | Maxdamantus | sicelo: does the API let you do anything other than check balances? eg, buy plans? |
| 21:05.04 | *** join/#maemo hurrian_ (~hurrian@unaffiliated/rikanee) |
| 21:30.04 | sicelo | i haven't investigated further. it's not documented anywhere, but i've been sniffing some of the responses on the network |
| 21:30.57 | sicelo | i don't think you actually can buy plans, although the 2nd ISP does provide an endpoint that lists all available plans |
| 22:46.07 | *** join/#maemo Kabouik (~kabouik@2a01cb008023010094ce3e4639dff0fa.ipv6.abo.wanadoo.fr) |
| 22:52.49 | *** join/#maemo Kabouik (~kabouik@2a01cb008023010094ce3e4639dff0fa.ipv6.abo.wanadoo.fr) |