#eu
Ms von der Leyen, there is no greater racist against Europeans than you! #EU
Latinopoulou5,930,336 просмотров • 1 месяц назад
Hacking the #EU #AgeVerification app in under 2 minutes. During setup, the app asks you to create a PIN. After entry, the app *encrypts* it and saves it in the shared_prefs directory. 1. It shouldn't be encrypted at all - that's a really poor design. 2. It's not cryptographically tied to the vault which contains the identity data. So, an attacker can simply remove the PinEnc/PinIV values from the shared_prefs file and restart the app. After choosing a different PIN, the app presents credentials created under the old profile and let's the attacker present them as valid. Other issues: 1. Rate limiting is an incrementing number in the same config file. Just reset it to 0 and keep trying. 2. "UseBiometricAuth" is a boolean, also in the same file. Set it to false and it just skips that step. Seriously Ursula von der Leyen - this product will be the catalyst for an enormous breach at some point. It's just a matter of time.
Paul Moore - Security Consultant 3,412,211 просмотров • 6 месяцев назад
Bypassing the latest #EU #ageVerification app (2026.07-1) with a Chrome extension... again. Despite 3 months of security hardening and genuine improvements across the board, the fundamental issue cannot be solved. Anonymous age verification doesn't work.
Paul Moore - Security Consultant 1,363,016 просмотров • 3 месяцев назад
Bypassing #EU #AgeVerification using their own infrastructure. I've ported the Android app logic to a Chrome extension - stripping out the pesky step of handing over biometric data which they can leak... and pass verification instantly. Step 1: Install the extension Step 2: Register an identity (just once) Step 3: Continue using the web as normal The extension detects the QR code, generates a cryptographically identical payload and tells the verifier I'm over 18, which it "fully trusts". This isn't a bug... it's a fundamental design flaw they can't solve without irrevocably tying a key to you personally; which then allows tracking/monitoring. Of course, I could skip the enrolment process entirely and hard-code the credentials into the extension... and the verifier would never know.
Paul Moore - Security Consultant 1,182,928 просмотров • 6 месяцев назад
0:24
Sensitive content
This media may contain sensitive content.
#ULTIMAHORA 🚨 SE PRENDEN LAS ALARMAS EN #EU POR LA FALTA DE TRABAJADORES EN EL CAMPO Casi nadie está trabajando, que el mercado alimentario ya tiene miedo que muy pronto se vaya a impactar la cadena de suministro, lo que va a incrementar los precios de la comida y a subir la inflación en Estados Unidos...
La Catrina Norteña2,882,298 просмотров • 1 год назад
When #NordStream Pipeline was attacked Ursula von der Leyen said there would be "strongest possible response".The brilliant Journalist Seymour Hersh has just said the #US did it - Does #EU care.? Did ye ask the US if they did it.? Or have ye become so subservient that ye dare not ask..?
Mick Wallace4,782,709 просмотров • 3 лет назад
Well damn!! #CDNpoli #EuropeanUnion #EU #Trump #Canada Damian Boeselager
🇨🇦🍁SillyRabbitFaFo🍁🇨🇦132,443 просмотров • 1 месяц назад
Nicolás Maduro amenaza con movilizar a más de cuatro millones de milicianos armados frente a la presión de #EU, que despliega tres destructores con misiles guiados en aguas venezolanas para apoyar operaciones antinarcóticos. Acusado de narcoterrorismo, su recompensa aumentó a 50 millones de dólares. La tensión en #Venezuela sigue en aumento, con #Washington decidido a eliminar su gobierno ilegítimo. Armando Guzman con la información en #Hechos
Azteca Noticias1,444,198 просмотров • 1 год назад