OpenSSL 4.1.0
OpenSSL 4.1.0 is a feature release that introduces new functionalities to the OpenSSL project. It includes significant updates, some of which may be incompatible with previous versions. (github.com)
Offline FairPlay DRM Decryption
github.com9 points0 comments
This project provides an offline tool to decrypt FairPlay‑protected App Store IPAs by performing independent key derivation from a 16‑byte account credential. It reads an IPA's SUPF and SINF records (supports SUPF v3 and v5 and 448‑byte or 440‑byte SINF private records - a 440‑byte record must terminate with eight zero bytes), derives per‑page keys, decrypts encrypted arm64 Mach‑O pages and clears the cryptid so the binary becomes usable. A separate credential retrieval component can extract the required 16‑byte credential from a supported jailbroken device and write it to credential.bin for decryption.
The tool runs on macOS and Linux and is implemented in Python with a small C component. Setup requires Python 3.9+, a C compiler, and building via a provided Makefile; macOS builds also require Xcode and ldid to produce the credential‑retrieval bundle, while Linux builds the decryptor. Main pieces include decrypt.py and core.py plus transform.c and transform_const_data.bin. Usage is python decrypt.py /path/to/encrypted.ipa /path/to/decrypted.ipa credential /path/to/credential.bin (credential argument is optional and defaults to ./credential.bin); the output path must not already exist. The implementation targets encrypted arm64 slices and automates page‑key derivation from SUPF/SINF to produce a decrypted IPA.
Summary generated by AI from the linked article. hn.today is not affiliated with Hacker News or Y Combinator.
More in Security
Swedish government offices to ban ChatGPT and Claude
Swedish government offices will ban the use of ChatGPT and Claude due to concerns over data security and privacy. The decision aims to prevent potential risks associated with AI language models in official settings. (sverigesradio.se)
Is this the new cyber normal?
A surge of critical software vulnerabilities has raised concerns about the evolving cybersecurity landscape, with AI models like LLMs rapidly developing exploits based on new bugs. This acceleration suggests that announcing security patches may no longer be enough to prevent widespread exploitation, indicating a potential shift in the cyber normal. (drew.silcock.dev)
Dutch government had hacked into Jared Kushner's phone
The Dutch government allegedly hacked into Jared Kushner's phone to monitor his activity related to a Dubai-based bank account. Kushner denied the claims, calling them false and unsubstantiated, and criticized Vanity Fair for publishing them without verification. (twitter.com)
Jared Kushner's Hacked Phone Revealed His Secret Negotiations
Jared Kushner's hacked phone revealed details of secret negotiations. The breach exposed sensitive information related to his covert diplomatic efforts. (wallhop.io)
How Generative AI Is Scaling Transnational Repression
Generative AI is being used to facilitate transnational repression by enabling authoritarian regimes to target dissidents and manipulate information across borders. This technology amplifies state surveillance and censorship efforts, raising concerns about human rights abuses worldwide. (justsecurity.org)