Channels
#random
- c
cedric
03/19/2019, 5:33 AMHaha, yeah, and they'll be right 🙂 - c
cedric
03/19/2019, 5:33 AMMaybe the app stores the last update timestamp of the db file? - u
ursus
03/19/2019, 5:35 AMhow would that help for tampering detection - c
cedric
03/19/2019, 5:36 AMWould explain that just copying and copying back would be detected - u
ursus
03/19/2019, 5:38 AMyou mean comparing the saved timestamp again file changed timestamp from os? - c
cedric
03/19/2019, 5:38 AMYup - u
ursus
03/19/2019, 5:38 AMI highly doubt it since db has the journals and wal files etc - u
ursus
03/19/2019, 5:39 AMI dont think you can know when it changed - c
cedric
03/19/2019, 5:39 AMDoes the crash give any indication? I supposed not since it's probably obfuscated - u
ursus
03/19/2019, 5:39 AMi.e. when they merge - u
ursus
03/19/2019, 5:40 AMno, .. calculating checksum over say 2mb databse every change, that would take way too long to be feasible, right? - d
dawidhyzy
03/19/2019, 5:40 AM#meta - u
ursus
03/19/2019, 5:42 AMCopy codeFor bytes 24..27 of the database header, SQlite doc says: 24..27 4 The file change counter. Each time a database transaction is committed, the value of the 32-bit unsigned integer stored in this field is incremented - u
ursus
03/19/2019, 5:42 AMinteresting - c
cedric
03/19/2019, 5:43 AMCalculating a checksum of a 2MB file is probably extremely fast, even on a phone. - u
ursus
03/19/2019, 5:44 AMreally? like under 50-100ms? - c
cedric
03/19/2019, 5:45 AMI don't know but whatever other change was made triggering that checksum, I bet that change would dwarf that time - u
ursus
03/19/2019, 5:47 AMwould you bother checksum tramper detection a cleartext database in first place? - c
cedric
03/19/2019, 5:53 AMDepends on the app I suppose - c
cedric
03/19/2019, 5:54 AMSlack... wouldn't surprise me in the least if they did that - u
ursus
03/19/2019, 6:03 AMwhy not just use sqlcipher? that would have it out of the box - u
ursus
03/21/2019, 2:38 AMGuys, I need a websocket to receive updates from backend, I tried OkHttp websocket support and it .. works, I get onOpen, and see onMessage my jsons nicely, I can also shut it down via webSocket.close() - b
bjonnh
03/21/2019, 10:43 PMNooooooo… https://plasma-umass.org/doppio-demo/😲 1😨 2 - p
pavel
03/21/2019, 10:47 PMlol - b
bjonnh
03/21/2019, 10:49 PMnote that there is a js interpreter included in it - r
r4zzz4k
03/22/2019, 12:19 AMJS-based emulation of
is beyond good and bad.sun.misc.Unsafe - o
orangy
03/22/2019, 9:25 AMDoes it run on Nashorn? - b
bjonnh
03/22/2019, 2:43 PMthe js interpreter does yes - b
bjonnh
03/22/2019, 2:43 PM - b
bjonnh
03/22/2019, 2:43 PMin the same vein