Profile

Cover photo
Alessio Moscatello
Works at Magneti-Marelli
Attended Polytechnic University of Turin
Lived in Torino
66 followers|148,630 views
AboutPostsPhotosVideos

Stream

Alessio Moscatello

Shared publicly  - 
 
CyanogenMod encrypted Device Finder!!
 
Technical Details on +CyanogenMod Device Finder

The new +CyanogenMod Device Finding service creates a secure connection between your browser (javascript) and your phone.

The server never has your password. Your authentication is a derived password.
A public key is generated in the browser, and hmac'd with the actual password (unavailable to the server).
On a device find request, the Android device receives this public key, and validates it is authentic, as the Android device also has the same, underived/original, password.
The Android device sends back an encrypted symmetric key using the public key.
The server can not decrypt the symmetric key, as it does not have the private key.
The browser receives the encrypted payload, and decrypts the symmetric key.

The browser and phone at this point have a secure communication channel, and both sides have authenticated each other. The server is not capable of listening in. It merely provides a transport.

The browser then requests the device location (or requests a wipe) through this secure channel.

The result? As seen in firebug below, the data sent through the server is completely opaque.

This is how device finding should be done. You can not trust that a service will never be compromised. You can never trust that a service will not be subject to the will of a government request.

You can only trust that your data was secure from the service itself.

The code is up on github, and a review from outside parties is highly encouraged.
1
Add a comment...

Alessio Moscatello

Shared publicly  - 
 
Vada, vada, circolare… Signo’ non c’è niente da vedere, vada.
1
Add a comment...

Alessio Moscatello

Shared publicly  - 
 
Expanding on our weekly Innovation column — which asks, Who made that? — we explore the origins of dozens of products and ideas in this special issue of the magazine.
1
Add a comment...

Alessio Moscatello

Shared publicly  - 
1
Add a comment...

Alessio Moscatello

Shared publicly  - 
If you're after a way to list all the packages you have explicitly installed (rather than packages that have been pulled in as a dependency) then you can do that with yumdb (thanks to Panu on #yum for the tip) which is powered by a new database added in 2009. List packages you chose to install: ...
1
Ilario Pittau's profile photoAlessio Moscatello's profile photo
8 comments
 
Parlo comunque del mio portatile :P Dovremmo fare un po' di prove incrociate per avere dati oggettivi :P
 ·  Translate
Add a comment...

Alessio Moscatello

Shared publicly  - 
 
Perfectly agree...in fact I've disabled as more as possible annoying application that continuously sends  notification on my Android phone...
1
Add a comment...
Have him in circles
66 people
Leo Caldarola's profile photo
LibreOffice Design's profile photo
Ivan Cerqua's profile photo
Caotic.it's profile photo
Giulio Gazzetto's profile photo
Mucrone Local's profile photo
Gary Sacchet's profile photo
Raffaele Forte's profile photo
Niccolò Tirelli's profile photo

Alessio Moscatello

Shared publicly  - 
 
L'arrivo dell'estate è sempre accompagnato dalle pubblicità di creme solari. Ottimo: la pelle va protetta e se non lo fai rischi un bel po' di problemi, dalla scottatura oggi al tumore alla pelle d...
1
Add a comment...

Alessio Moscatello

Shared publicly  - 
1
Add a comment...

Alessio Moscatello

Shared publicly  - 
 
Tutti i simpatici caratteri che vedevo quando andava in crash il mio vecchio 486 :P
 ·  Translate
1
Add a comment...

Alessio Moscatello

Shared publicly  - 
1
Add a comment...
People
Have him in circles
66 people
Leo Caldarola's profile photo
LibreOffice Design's profile photo
Ivan Cerqua's profile photo
Caotic.it's profile photo
Giulio Gazzetto's profile photo
Mucrone Local's profile photo
Gary Sacchet's profile photo
Raffaele Forte's profile photo
Niccolò Tirelli's profile photo
Education
  • Polytechnic University of Turin
    Ingegneria Informatica, 2007
Basic Information
Gender
Male
Work
Employment
  • Magneti-Marelli
    2012 - present
  • Akhela
    2011 - 2012
Places
Map of the places this user has livedMap of the places this user has livedMap of the places this user has lived
Previously
Torino
Links
Other profiles