« first day (2340 days earlier)      last day (2623 days later) » 

6:04 PM
I ended up needing device-specific drivers.
cool! It works now. That sure was more painful than it should have been.
 
that cat has a quest for me
 
hello~~~ 😃
 
wb, womp
 
i'm supposed to be doing uni work
D:
and yet, here i am. Sharing cat pictures
 
6:10 PM
and sharing videos
i was being productive
i had read 6 lines
and here i am
 
I am running my test suite after finally getting AS to recognize my device.
 
watching logan singing beauty and the beast
 
¯\_(ツ)_/¯
 
Logan? As in Wolverine? As in Hugh Jackman?
 
yep
 
6:12 PM
link
 
> A SQLiteConnection object for database '/data/data/bbct.android/databases/bbct.db' was leaked! Please fix your application to end transactions in progress properly and to close the database when it is no longer needed.
uhoh
 
your dabatase is leaking
needa some duct tape?
 
Have you seen Logan yet?
 
yusss
so many feels
 
6:14 PM
nope
;_;
nobody wants to go see it with me
 
I went to it by myself.
If you come visit, I'll see it with you!
Hugh Jackman actually has a decent voice.
Did you see him in Les Mis?
 
les miserables. yep.
 
yep
 
3 times in the cinema
 
o/
 
6:15 PM
about 20 on blue ray
 
AND WE MISSED THE BEGINNING THE 3 TIMES
\o
 
yup
o/
i'm sorry for number #2
totally my fault
i missed my cash at home and had to go back up
 
oh
 
still that was the one we got closer to the ship scene
 
I only saw it once. The friend I took was just bawling at the end.
 
6:17 PM
yeah i still remember that dunno why
 
s/missed/left/
s/go back up/go back/
 
uh
sorry
i'm punching the english language too much today
 
in Python, 2 mins ago, by Robert Grant
Is there, in Silicon Valley, a bar called Foo Bar?
@CptEric No need to apologize. I don't mean to make you feel bad by correcting your English.
 
Yay! Just pushed two commits to GitHub for the first time in at least a month!
They are in a branch that hasn't been merged yet...but at least it's more than I have done for a while.
 
6:46 PM
nice
i'm doing nothing productive
 
hmmm...one of my tests is hanging
I think all my tests finished just fine (pass or fail) just a little while ago...
 
7:05 PM
hmm...one of my tests is a little problematic. It puts the device to sleep and wakes it up again. But my device is encrypted, so I get the password lock screen when it wakes up.
I guess I'll just have to deal with that.
 
 
2 hours later…
9:28 PM
posted on March 13, 2017 by Android Developers

Posted by Security Software Engineers—Bernhard Grill, Megan Ruthven, and Xin Zhao Google works hard to protect users across a variety of devices and environments. Part of this work involves defending users against Potentially Harmful Applications (PHAs), an effort that gives us the opportunity to observe various types of threats targeting our ecosystem. For example, o

 
9:52 PM
o/
 
How's it going, Mr. Anderson?
 
the web team is starting to experiment with "physical web" BlueTooth beacons
which means that I'm getting "nearby URL" notifications on my phone every few minutes -.-
and the "mute this URL" button does nothing
 
nearby url?
why are you getting notificiations from a different team?
 
because they're playing with the beacons
 
10:07 PM
but how are you getting their notifications?
 
You should file a bug report for that
 
~a day with carl~
srsly thinking about starting the millionth shitty web comic rn
 
Do it!
Did you work on the outlook app at all?
 
Guys
Say I have a mobile application
 
I have a mobile application
 
10:15 PM
Is it possible for me to detect all socket/http/whatever connections to the outside from that application?
 
@codeMagic yeah why?
 
I thought so. I'm being forced to use Outlook and the app actually seems nice
 
:}}}}
 
So good job
I was dreading how their mobile app would be but I was pleasantly surprised. haha
 
:D
 
10:17 PM
@codeMagic 😂
 
@Shoe explain
what do you mean
 
Shoe, I would expect that to be a sandbox security exception if you were able to
 
network traffic from other apps?
 
you're essentially trying to run netstat ?
 
I'm trying to read the messages an application is sending to the outside server
Given that the phone is connected to the computer and it's the phone that is encrypting stuff, I'd say there's no security concern
Or at least I'd guess that
 
10:19 PM
I wouldn't think that you would be able to
 
are you trying to intercept network traffic from another app on the phone??
 
I'm trying to intercept traffic from an app on my phone to some server
Imagine Whatsapp
I'd like to see what messages this app sends to the whatsapp server to notify it of new messages
 
you want a proxy
 
I can't redirect the app traffic to a proxy
The app is not mine
 
sure you can
your phone connects to your LAN
you set up a manual proxy that redirects traffic to your laptop on that LAN
the only thing that stops it, is if they have correctly added certificate pinning
 
10:24 PM
@CarlAnderson That's for pc and it seems to be HTTP only
 
but even then, I think you can sniff the packets
works fine on my mac too
and it works for https too
the only thing that stops is is certificate pinning
 
whatsapp does cert pinning
you need to decompile the apk and turn that off if you want to intercept anything
facebook for some reason doesn't have cert pinning if you're interested in what kind of stuff they send
 
wait
network monitor on android studio seem to work
 
only for your own app probably
 
@Ahmad have you done this before?
 
10:31 PM
I tried
I failed
 
I'm gonna be honest here
 
in theory it was just returning false for the okhttp ssl factory iirc
 
I haven't tried decompiling an app and actually making changes to it before.
 
but I couldn't recompile the apk
but it's possible
 
The intention here is to automate a mobile game
It's one of those games like Farmville
I've tried with monkeyrunner, which would be ok, except that movement on the map is not precise as I'd like
 
10:33 PM
yeah then just use mitmproxy
and then figure out the api endpoints
it's probably going to be difficult though
 
I know
 
figuring out everything from auth to bypassing their fraud detection
 
If I could I would write a bot that does actions like I normally would
Like with monkeyrunner
 
and if it's a sophisticated real time game then they probably use udp not tcp
 
Problem is that scrolling is never precise
It's not
It's "plant seeds"/"pick up product"/"gather resources"
The multiplayer part of it is often not synchronized
Like I see I have X + 130 points
and somebody else sees X points
because the last 130 were made in the last 10 minutes
 
10:35 PM
yeah then mitmproxy or chalesproxy
but ofc what's the point of a game if you want to automate it
 
Isn't there maybe some way for me to communicate with the UnityPlayer via activities maybe?
@Ahmad It's just to win a bet with my GF
 
lol
 
She is obsessed over this game and we are competitive
 
haha
 
I can't stay there playing for hours
 
10:36 PM
nah, can't do this with activities
you have to figure out the api endpoints
 
So I thought, what if I automate it and beat her ass
Technically it's still just me
Ethics aside, then I'll have to try the endpoints
 
I like fiddling around with api endpoints
one time I found an app that had poor security and I could activate the pro version by just making a request to an edpoint
 
@Ahmad Are you sure about activities?
 
yep
 
Every time I do something I get an activity log on logcat monitor
Like
> 03-13 23:30:51.551 371-371/? D/SFPerfTracer: layers: (1:10) (FocusedStackFrame (0xb7619308): 0:6108)* (DimLayer (0xb764c890): 0:2)* (DimLayer (0xb761c748): 0:4)* (com.android.systemui.ImageWallpaper (0xb76429a8): 0:17998)* (StatusBar (0xb766b0f8): 2:211590)* (DimLayer (0xb7641608): 0:885)* (DimLayer (0xb761da10): 0:232)* (NavigationBar (0xb767f850): 0:133)* (com.X.Y/com.prime31.UnityPlayerNativeActivity (0xb760af90): 0:51)* (SurfaceView (0xb7660168): 87:10965)
 
10:42 PM
yeah but that doesn't help you with anything
you want to do propagate an event to the app
you can go the ui automation route but you already said that doesn't seem to work
 
Can't I simply reproduce that activity ("which is click x, y on the map") and then automate via that?
Oh wait
I need those objects
Those are Java objects
@Ahmad Wouldn't it make more sense for them to use sockets?
 
sockets drain battery really fast
constantly needing to keep a connection open to the cell tower
instead of just periodically trading network traffic
 
for a game though?
if it's real time they might
can't say, I don't even know the game
probably if they have to push a lot of events
 
I suspect that Hearthstone does use a Socket
when my network connection is flaky, I'll get dropped (and reconnected) to my game
 
bettle.net reconnects are infamous
The game is foodstreet
I highly doubt it's reatime
For why uiautomator and monkeyrunner cannot work see:
0
Q: Actions in monkeyrunner are not reliable

ShoeQuestion My application has a map-like canvas where the user can move by dragging the map around. What I'm trying to accomplish is move the map to the right of 100px and then to the left of 100px and check if the position in the center is the same. The code is as follows: device.drag((640, 360...

 
10:52 PM
wait a minute
@cygery did you not build this app that lets you automate games?
it's like monkeyrunner but apparently more reliable
 
@Ahmad Oh yeah I forgot that there was another thing I was checking
Low level touch events
I didn't try that yet
Maybe it uses that
 

« first day (2340 days earlier)      last day (2623 days later) »