3 ms·
> However, did you know that not all open source stuff is on github??? Yes, I did. I also looked for bitbucket, gitlab, Google Code, etc. and found nothing. S
by sarciszewski 12y ago
> However, did you know that not all open source stuff is on github???
Yes, I did. I also looked for bitbucket, gitlab, Google Code, etc. and found nothing.
So I just opened it in JD GUI and saw this gem.
Cipher localCipher = Cipher.getInstance("AES/ECB/NoPadding");
Don't use BABEL. It's written by people who don't understand security.
EDIT:
private static final SecretKey a = new SecretKeySpec(
new byte[]
{
-91, 63, 7, 80, 88, -58, -47, -28, 55, 126, -126, 27, 67, -64,
97, -46, 5, 44, -14, -94, -103, 96, -57, 33, -108, -104, -122,
125, 49, 29, -25, -27
},
"AES"
);
Is dat a static key? :O
- JupiterMoon 12y ago> Yes, I did. I also looked for bitbucket, gitlab, Google Code, etc. and found nothing. No worries then. I checked out their website - I can't see any links to source code. So in my opinion it's just yet another closed source pretending to be secure messaging service then...
- darkhorn 12y agoShit!