Couldn’t think of a nice title. There used to be this thing I used to do back in 2007-2010, which was sending Class0 and Message Waiting Indicator (MWI) messages to…
How NOT To Run A Capture-The-Flag: CDDC2021
Over the school holidays, DSTA (Defence Science & Technology Agency, Singapore), a statutory board of the Singapore Government, ran BrainHack 2021 from 10 May to 25 June 2021. Part of…
Decrypting AES-128 Encrypted HTTP Live Streaming
I came across an interestingly encrypted HLS m3u8 playlist the other day. This was on a site that you could only access once – after which, you lose access to…
Of Passwords and Personal Information: Investigating the RedMart Data Breach
On 30 October 2020, CNA reported that online shopping platform RedMart, owned by the Lazada Group, suffered a data breach. The stolen database contained the details of 1.1 million customers…
TraceTogether, SafeEntry, and the Erosion of Public Trust
On the 4 January 2021, Member of Parliament Gerald Giam Christopher de Souza (correction: Mr Gerald Giam asked the follow-up question, but Mr Christopher de Souza asked the initial question….