3 ms·
Why does this application send these requests over HTTP? For example: def getPasswords(self): """Func which get all password from server"""
by BeefWellington 4y ago
Why does this application send these requests over HTTP?
For example:
def getPasswords(self):
"""Func which get all password from server"""
# Create requests for getting passwords
self.header.loadingIndicator.setHidden(False)
self.header.spinner.start()
request = QNetworkRequest(QUrl("http://217.28.228.66:8000/api/get_passwords"))
data, signature = generate_verification()
self.getNetworkManager.sendCustomRequest(
request,
QByteArray("GET".encode("utf-8")),
QByteArray(json.dumps({
"public_key": pub_key_string,
"verification_string": data,
"signature": signature
}).encode("utf-8"))
)
I'm all for student projects but this is security basics 101. A simple replay attack would let someone wipe out any sniffed passwords because of how the deletion logic appears to work.