Loris Lawris

Reverse Engineered VAS Protocol Specification

Research by Grayson Martin
Last Updated 7/8/23

Introduction

Value Added Services (VAS) is the protocol used by NFC capable passes in Apple Wallet. Access to this protocol is heavily restricted on both the device end (a special certificate issued by Apple is required to create these passes) and the reader end (NDA enforced confidentiality). As such, a desire arose to better understand the protocol in order to explore additional use cases and examine its cryptographic integrity. There are gaps in understanding in certain parts of this protocol, however this document contains the minimum necessary understanding to automatically select, read data from, and decrypt a pass.

Importantly, this specification does not enable a malicious actor to read the data from a pass for which they do not have both the reader's private key, and the pass type identifier. Imp

Apache Jena: Step by step guide

Steps	Presentation
1. Download the zip file of Apache Jena Fuseki on the website Apache Jena
2. After unpacking, the server can be executed for the first time by running (double-clicking) the "fuseki-server.bat".
3. The server offers a web interface that can be reached in the browser under localhost:3030. Here, so-called datasets, i.e. independent ontologies (e.g. for different projects) can be created or existing datasets can be edited. Files can also be uploaded.

Information

SPARQL que

	#! /bin/bash

	# NEWLY ADDED BACKUP FUNCTIONALITY IS NOT FULLY TESTED YET, USE WITH CARE, ESPECIALLY DELETION
	# Developed for DSM 6 - 7.0.1. Not tested on other versions.
	# Steps to install
	# Save this script in one of your shares
	# Edit it according to your requirements
	# Backup /usr/syno/share/nginx/ as follows:
	# # cd /usr/syno/share/
	# # tar cvf ~/nginx.tar nginx