✧✦Catherine✦✧Jan 23
so this vendor is putting a CRC16 in INI files
Show thread✧✦Catherine✦✧Jan 23
🦋 vendor pointing at a C header: "is this an INI file?"
Show thread✧✦Catherine✦✧Jan 23
vendor pointing at the end of an INI file (clearly containing C source code): indeed... why should I not put something that is probably a CRC-32 here?
Show thread✧✦Catherine✦✧Jan 23

there's a hardcoded 32-byte AES key the firmware uses to encrypt passwords... except they fucked up (made an array of u32 and not u8) and 3/4 of the key is zeroes

not that it matters a lot given it's hardcoded

Show threadF4GRX Sébastien
@whitequark oh no oh fuck oh noooooo
Jan 23 at 8:42pmWeb