Note by @jeder

🔜 eth0 @jeder@miau.jeder.pl

if you use pkp intercity mobile app with PIN, you should try typing in another combination that has the same sum of the digits

1⭐4🥴3

Jeder

🔜 eth0 @jeder@miau.jeder.pl

so, if you use 1234 as pin, 4321 will also work, and so will 3241 or 1423

1⭐2

nimona

@nimona@queer.witchli.eu

@jeder what

Jeder

🔜 eth0 @jeder@miau.jeder.pl

@nimona this is just another banger coming from authors of isPies

⭐3

nimona

@nimona@queer.witchli.eu

@jeder this is like a major security flaw
that leaves like... 37 combos?

Jeder

🔜 eth0 @jeder@miau.jeder.pl

@nimona and that's just for 1234

nimona

@nimona@queer.witchli.eu

@jeder no i meant overall
sums can be from 0 to 36

Jeder

🔜 eth0 @jeder@miau.jeder.pl

@nimona ye

⭐1

[moved] stereo griever @selfisekai@hackerspace.pl

@jeder or 9100, or 0028, ...

⭐1

LEdoian @ledoian@pleroma.ledoian.cz

@selfisekai @jeder Does this mean that there are 37 possible PINs to lock the app? That is not a lot…

How many tries do you get? For three tries I think there is ~1:12 chance for breaking in (and ~1:11.3 if we consider that PINs '0000' and '9999' are "obviously insecure", while they might be actually less probable than the many colliding numbers…)