Link preview
x.com
tower unite protected its backend handshake with hand-rolled rsa: a toy key generator, a 509-bit modulus, and a decrypt routine that leaked uninitialized heap. i factored the key over a weekend on my friends' gaming pcs and read the whole protocol off the wire against an unmodified client. the break, the bugs that made it easy, the surprisingly fast fix, and the mitm still left open. X (formerly Twitter) · twitter.com
tower unite protected its backend handshake with hand-rolled rsa: a toy key generator, a 509-bit modulus, and a decrypt routine that leaked uninitialized heap. i factored the key over a weekend on my friends' gaming pcs and read the whole protocol off the wire against an unmodified client. the break, the bugs that made it easy, the surprisingly fast fix, and the mitm still left open.
Comments