Symmetric keys are only to be used in a peer-to-peer way so it would be pointless for the receiver to modify JWTs for which only he and the sender have a shared key (and he is the intended recipient). Asymmetric key signatures (in JWTs as well as in general) are produced by the sender with … Read more
The easiest way to check is to look at embedded.mobileprovision ([[NSBundle mainBundle] pathForResource:@”embedded.mobileprovision” ofType:nil]): It’s a bit of a pain to parse since it’s a signed plist (PKCS#7 signed data, according to openssl asn1parse -inform der), but a bad hack is to just look for <plist and </plist>. Development contains UDIDs and <key>get-task-allow</key><true/> Ad Hoc … Read more
This is a known issue. The Canonicalization implementation between .NET 3.5 and .NET 4.0 has changed. I don’t know if this works on all XML signatures but the following works from the testing that I’ve done. Add the following C14N Transform class to your project: public class MyXmlDsigC14NTransform: XmlDsigC14NTransform { static XmlDocument _document; public static … Read more
This method signature is “useful”, in the sense that you can implement non-trivial, non-degenerate methods with it (that is, returning null and throwing errors are not your only options). As the following example shows, such a method can be useful for implementing some algebraic structures like e.g. monoids. First, observe that List<? extends T> is … Read more
Now, that people seem to realize this is a real security problem (as described in this blog-post (the blog seems down, here is an archived version of the blog)), there is a plugin for verifying PGP signatures. You can verify the signatures for all dependencies of your project with the following command: mvn org.simplify4u.plugins:pgpverify-maven-plugin:check Of … Read more
(assuming you can obtain access to the raw apk file – which you usually can, if you know or make an educated guess of its name and location, even though you can’t list the contents of /data on a non-rooted phone) You could open the apk as a zip file and filter the ascii text … Read more
The unofficial fork of the python sdk is still working fine for me. To retrieve your friends, generate an access token here: https://developers.facebook.com/tools/access_token/ Limitations: A user access token with user_friends permission is required to view the current person’s friends. This will only return any friends who have used (via Facebook Login) the app making the … Read more
In C++, void no_args() declares a function that takes no parameters (and returns nothing). In C, void no_args() declares a function that takes an unspecified (but not variable) number of parameters (and returns nothing). So all your calls are valid (according to the prototype) in C. In C, use void no_args(void) to declare a function … Read more
A function declaration is the prototype for a function (or it can come from the function definition if no prototype has been seen by the compiler at that point) – it includes the return type, the name of the function and the types of the parameters (optionally in C). A function signature is the parts … Read more