GenitalHurricane

joined 11 months ago
[–] GenitalHurricane 11 points 4 days ago

Ah yes, delete your original incorrect comment instead of continuing the discussion about how wrong and lazy it was to make, nice.

[–] GenitalHurricane 95 points 4 days ago* (last edited 4 days ago) (2 children)

Libmanwe-lib.so is a library file in machine language (compiled). A Google search reveals that it is exclusively mentioned in the context of PDD software—all five search results refer to PDD’s apps. According to this discussion on GitHub, “the malicious code of PDD is protected by two sets of VMPs (manwe, nvwa)”. Libmanwe is the library to use manwe.

An anonymous user uploaded a decompiled version of libmanwe-lib to GitHub. It reads like it is a list of methods to encrypt, decrypt or shift integer signals, which fits the above description as a VMP for the sake of hiding a program’s purpose.

In plain words, TEMU’s app employed a PDD proprietary measure to hide malicious code in an opaque bubble within the application’s executables

[–] GenitalHurricane 17 points 4 days ago (1 children)
  1. Dynamic compilation using runtime.exec(). A cryptically named function in the source code calls for “package compile”, using runtime.exec(). This means a new program is created by the app itself.—Compiling is the process of creating a computer executable from a human-readable code. The executable created by this function is not visible to security scans before or during installation of the app, or even with elaborate penetration testing. Therefore, TEMU’s app could have passed all the tests for approval into Google’s Play Store, despite having an open door built in for an unbounded use of exploitative methods. The local compilation even allows the software to make use of other data on the device that itself could have been created dynamically and with information from TEMU’s servers.
[–] GenitalHurricane 0 points 1 month ago

InAfter bad take proves opinion formed based on headline because reading is hard

[–] GenitalHurricane 10 points 2 months ago

Great timing on this article and a new episode about Tyson from one of my favorite podcasts

https://pca.st/episode/f7d0725d-dcf7-4d63-8db3-269401469e4b

[–] GenitalHurricane 4 points 2 months ago (1 children)
[–] GenitalHurricane 1 points 3 months ago

“But they continue to follow up and continue to follow up to rescue them. So while I’m totally excited, because we’ve never seen these numbers, the biggest problem we have in this type of investigation is getting the victims to admit their victims because they’re more afraid of their pimps and the human traffickers than they are the criminal justice system,” Judd said.

It's 2024 but fuck basic grammar editing in Florida, right ClickOrlando?

[–] GenitalHurricane 12 points 4 months ago (3 children)
[–] GenitalHurricane 9 points 4 months ago (1 children)

Unfuckingbelievable

[–] GenitalHurricane 2 points 4 months ago
view more: next ›