Berni Hackl tonnenpinguin

Reverse Engineered VAS Protocol Specification

Research by Grayson Martin
Last Updated 7/8/23

Introduction

Value Added Services (VAS) is the protocol used by NFC capable passes in Apple Wallet. Access to this protocol is heavily restricted on both the device end (a special certificate issued by Apple is required to create these passes) and the reader end (NDA enforced confidentiality). As such, a desire arose to better understand the protocol in order to explore additional use cases and examine its cryptographic integrity. There are gaps in understanding in certain parts of this protocol, however this document contains the minimum necessary understanding to automatically select, read data from, and decrypt a pass.

Importantly, this specification does not enable a malicious actor to read the data from a pass for which they do not have both the reader's private key, and the pass type identifier. Imp

Soft Delete Ecto Repo

The goal is to support soft delete functionality in Ecto.Repo. With the suggestion by @imranismail, another repo is created and the remaining functionalities are delegate to the original MyApp.Repo.

The new repo get/2 and all/1 functions will exclude the soft deleted record by default. delete/1 and delete_all/1 will update the delete_at column by default instead of deleting.

Example

MyApp.Repo.get(MyApp.User, 1) //will return nil if record is in soft delete state

Build icinga2 and icinga-web Debian/Ubuntu packages for non-{i386,amd64} architectures

Why?

The icinga PPA only provides packages for i386 and amd64. If you're running an ARM-powered device such as the Raspberry Pi or the ODROID U3 (which I use), you have to build the packages yourself. However, compiling the packages is very easy thanks to Debian's excellent build tools and the work of the icinga package maintainer. This howto uses pbuilder which builds in a clean chroot so your original system is not polluted with build packages.

Sample service script for debianoids

Look at LSB init scripts for more information.

Usage

Copy to /etc/init.d:

# replace "$YOUR_SERVICE_NAME" with your service's name (whenever it's not enough obvious)

	import path from 'path';
	import fs from 'fs';
	import initStoryshots from '@storybook/addon-storyshots';
	import { imageSnapshot } from './storyshots-puppeteer';

	import devices from 'puppeteer/DeviceDescriptors';

	// Store the screenshots outside the source folder to prevent jest from 'watching' them.
	// Since they're outside the src directory we nav to them relatively
	const ROOTDIR = path.join(__dirname, '../../../');

	#!/bin/bash

	# get hterm
	wget http://www.der-hammer.info/terminal/hterm.tar.gz
	tar xvfz hterm.tar.gz

	# get libpng12
	wget http://mirrors.kernel.org/ubuntu/pool/main/libp/libpng/libpng12-0_1.2.54-1ubuntu1_i386.deb
	wget http://mirrors.kernel.org/ubuntu/pool/main/libp/libpng/libpng12-0_1.2.54-1ubuntu1_amd64.deb
	sudo dpkg -i libpng12-0_1.2.54-1ubuntu1_*

	defmodule Default.Behaviour do
	@moduledoc """
	Creates a behaviour that carries its own default implementation.

	When used into a behaviour module, when that module in turn is used, all functions
	defined on it are given to the using module.

	This allows you to have concrete implementations of the behaviour's default functionality
	for testing, unlike cramming them all into a __using__ macro.