Profile cover photo
Profile photo
Alessio Delmonti
I'm a problem solver by nature.
I'm a problem solver by nature.

Alessio's posts

Post has attachment
I ask 1 minute of your time to check it out WIT - Without Internet Technology

Post has shared content
Forgot your Android keystore password? No problem!

I recently needed to update an Android app I have on the Play store, when I discovered I apparently forgot my keystore password. I immediately started brute force and dictionary attacks with the Android Keystore Password Recovery tool (, which eventually (after about 2 months) revealed the password to the private key. I knew I had used separate keystore and private key passwords, and so this wasn't terribly helpful.

I was curious how it could check the inner private key password without knowing the keystore password -- I would expect there to be two levels of full encryption. However, upon inspection of the tool's code, I realized it was just using a dummy password of "a" for the keystore. I tried this with the official tools (jarsigner and keytool), but they require a minimum password length of 6 characters. The code for the password recovery tool includes Casey Marshall's reverse-engineered implementation of the Java Keystore format, so I wrote my own keystore file inspector. Apparently, the keystore password is only used for integrity-checking, and the keystore isn't actually encrypted.

From here, I recovered my key by simply reading the keystore in with a dummy password, and writing it out with the new one. Keytool works with it, and I was able to sign my apk with Eclipse and upload to the Play Store.

I've uploaded my code to GitHub, along with Marshall's JKS implementation:

#android   #google    #security   #programming   #softwaredevelopment   #cracking   #hacking   #java  

Edit: Updated the link from google code to github.

Post has shared content
And now?
When we publicly launched Freebase back in 2007, we thought of it as a "Wikipedia for structured data." So it shouldn't be surprising that we've been closely watching the Wikimedia Foundation's project Wikidata[1] since it launched about two years ago. We believe strongly in a robust community-driven effort to collect and curate structured knowledge about the world, but we now think we can serve that goal best by supporting Wikidata -- they’re growing fast, have an active community, and are better-suited to lead an open collaborative knowledge base.

So we've decided to help transfer the data in Freebase to Wikidata, and in mid-2015 we’ll wind down the Freebase service as a standalone project. Freebase has also supported developer access to the data, so before we retire it, we’ll launch a new API for entity search powered by Google's Knowledge Graph.

Loading Freebase into Wikidata as-is wouldn't meet the Wikidata community's guidelines for citation and sourcing of facts -- while a significant portion of the facts in Freebase came from Wikipedia itself, those facts were attributed to Wikipedia and not the actual original non-Wikipedia sources. So we’ll be launching a tool for Wikidata community members to match Freebase assertions to potential citations from either Google Search or our Knowledge Vault[2], so these individual facts can then be properly loaded to Wikidata. 

We believe this is the best first step we can take toward becoming a constructive participant in the Wikidata community, but we’ll look to continually evolve our role to support the goal of a comprehensive open database of common knowledge that anyone can use.

Here are the important dates to know:

Before the end of March 2015
- We’ll launch a Wikidata import review tool
- We’ll announce a transition plan for the Freebase Search API & Suggest Widget to a Knowledge Graph-based solution

March 31, 2015
- Freebase as a service will become read-only
- The website will no longer accept edits 
- We’ll retire the MQL write API

June 30, 2015
- We’ll retire the Freebase website and APIs[3]
- The last Freebase data dump will remain available, but developers should check out the Wikidata dump[4]

The Knowledge Graph team at Google


Post has attachment

Post has attachment

Post has attachment
Your house is full of spirits but you don't have any idea of ​​how to prepare a decent cocktail? Want to impress by telling stories and anecdotes about the world's most important cocktails ?

Cocktail Town is a minimal designed app with 77 recipes of the most famous cocktails in the world, as selected by the IBA, The International Bar Association, that for 60 years decides which are the highest industry standards and preserves the original recipes.
You will have at hand a cookbook of essential internationally recognized cocktails, with a mood that reminds the elegant publications of the 20s.

The application allows you to browse the recipes, search for a specific cocktail or save it to your favorites. Every cocktail has a detailed page with photos, ingredients, preparation and history.

Cocktail Town is availabale for free on the Play Store for a limited time of 30 days.
Developers announced the release of a pro version with the addition of some features and recipes in the next few months.

Post has shared content

Post has attachment
I love casual apps!

Post has attachment
VoxxDays Ticino - Demo App

Post has attachment
Regali fighissimo per tutti i nerdoni incalliti: #natale #nataleNerd #geek

1° MaKey MaKey per i #maker , io sbavo dalla prima volta che l'ho visto.
2° Casco Batman per i centauri che combattono contro il crimine
3° Guanto da forno da vulcaniano stile Spock di Star Trek

#carobabbo #letterinaNatale
Wait while more posts are being loaded