4 ms·

But snapchat updated its encryption just a couple of days ago: https://github.com/programa-stic/snapchat-decrypt https://github.com/programa-stic/snapchat-decry

• thebradbain 12y ago
  Ooh, I didn't even to think to test it on Android phones. This method works on iOS devices, however.
• ne0n 12y ago
  What do the android ids look like? I'm assuming it's just a number, but I don't know how big. The page you linked to says the key is md5(android_id + "seems legit..."). It seems to me like this could potentially be brute forced to find the android_id using a captured encrypted image.
  • e12e 12y ago
    Except for versions 2.2, it appears to be a random 64bit integer: http://developer.android.com/reference/android/provider/Settings.Secure.html#ANDROID_ID http://developer.android.com/reference/android/provider/Sett... That would take some time to brute force I guess. Especially if the only way to check each guess is to try and decrypt and look for a valid (part of an) image header.
• e12e 12y ago
  Well, that's for the encryption key of the images stored on the device. But if you can MITM the connection, then you can get the images as they come from snapchat to the device? And either the device have to send the id up, so the server can encrypt the images with a shared secret (perhaps the id is sent when the app is installed?) -- or the images are sent, encrypted with a different key, then re-encrypted for storage on the device?