Quick question: assuming you've already "upgraded" to Diablo (like querty12), do the online updates still work despite the password? Or is querty12 doomed to run last week's version of Diablo until the official version is released? (Well, not querty12, per se, since he now knows the username/password, but what about those who don't?)
I'd definitely be interested in dabbling with Diablo, but only if I had access to the weekly updates.
Hey guys, you know the authentication is being done via HTTP, not HTTPS, so all we have to do is crack querty12's machine and monitor his TCP traffic. Sounds like quert12 is one of those newbie hackers, so he probably hasn't secured his machine, yet. ;-)
P.S. This post is a joke. I do not condone those forms of "hacking" known as "cracking." I am a true hacker, i.e. a hacker of code - it's a hobby, and it's also my profession. "Cracking," on the other hand, is illegal and dumb - don't do it, kids.
SSU updates do still work. I updated my N800 today to latest Diablo.
Hm, that's interesting. So do the online updates not use the "updates" repository? Do they not use APT at all? Where do the updates come from, if not from the repository?
Or are we suggesting that the server somehow "knows" if the request is coming from APT as opposed to a web browser? I thought an earlier post suggested that using WGET with the appropriate USER-AGENT had no effect?
All this "hacking" was just reading one public file that can be found in maemo site on public place. Gnuite, same here. My modified initfs was due me hacking it
Gnuite, believe me same place. But I will say this everyone, even w/out knowing pwd, you are missing an extremely obvious fact..
useragent is used but there is more to it than just ua.
Hm, that's interesting. So do the online updates not use the "updates" repository? Do they not use APT at all? Where do the updates come from, if not from the repository?
Or are we suggesting that the server somehow "knows" if the request is coming from APT as opposed to a web browser? I thought an earlier post suggested that using WGET with the appropriate USER-AGENT had no effect?
I don't know but it seems like the web server detects the client who is accessing it... As long as it works I don't care...
