n8fr8

JNIEXPORT jint JNICALL Java_org_torproject_android_service_vpn_Tun2Socks_processDnsPacket(
    jclass cls,
    JNIEnv* env,
    jbyteArray packet,
    jint dataLength)
{

    jboolean isCopy;
    jbyte* dataPtr = (*env)->GetByteArrayElements(env, packet, &isCopy);
    process_device_dns_packet ((uint8_t *)dataPtr, dataLength);

n8fr8

inbound:

[IPv4 Header (20 bytes)]
  Version: 4 (IPv4)
  IHL: 5 (20 [bytes])
  TOS: [precedence: 0 (Routine)] [tos: 0 (Default)] [mbz: 0]
  Total length: 66 [bytes]
  Identification: 25123
  Flags: (Reserved, Don't Fragment, More Fragment) = (false, true, false)
  Fragment offset: 0 (0 [bytes])

n8fr8

[IPv4 Header (20 bytes)]
  Version: 4 (IPv4)
  IHL: 5 (20 [bytes])
  TOS: [precedence: 0 (Routine)] [tos: 0 (Default)] [mbz: 0]
  Total length: 66 [bytes]
  Identification: 16217
  Flags: (Reserved, Don't Fragment, More Fragment) = (false, true, false)
  Fragment offset: 0 (0 [bytes])
  TTL: 64
  Protocol: 17 (UDP)

n8fr8

#!/bin/bash

prooffile=$1
set $(sha256sum $1)
proofhash=$1
echo checking integrity for proofhash $proofhash
rm pubkey.asc.gpg
gpg --dearmor pubkey.asc
gpg --no-default-keyring --keyring ./pubkey.asc.gpg --homedir ./ --verify $proofhash.asc $prooffile
gpg --no-default-keyring --keyring ./pubkey.asc.gpg --homedir ./ --verify $proofhash.proof.csv.asc

n8fr8

n8fr8@expanse:~/dev/repos/orbot$ fdroid nightly --show-secret-var
Importing keystore /home/n8fr8/.android/debug.keystore to /tmp/.3vgq7fv9/.keystore.p12...

Warning:
<androiddebugkey> uses the SHA1withRSA signature algorithm which is considered a security risk. This algorithm will be disabled in a future update.
writing RSA key
2022-09-14 11:18:58,259 CRITICAL: Unknown exception found!
Traceback (most recent call last):
  File "/usr/bin/fdroid", line 33, in <module>
    sys.exit(load_entry_point('fdroidserver==2.1.1', 'console_scripts', 'fdroid')())

n8fr8

var fs = require('fs');
var path = require('path');
// In newer Node.js versions where process is already global this isn't necessary.
var process = require("process");
var geojson = require('geojson');
const tokml = require('tokml');


var proofDir = process.argv[2]
const proofPoints = [];

n8fr8

Claude finished the response
1748635752784.jpg

You are a digital media forensics analyst specializing in content provenance, authenticity verification, and chain-of-custody analysis. Analyze the attached ProofCheck report for a media file and produce a structured forensic assessment. Your analysis should cover the following areas, in order: 1.

pasted

4:53 PM
Claude responded: Forensic Analysis: ProofCheck Report for 1748635752784.