Quote:
Originally Posted by lrpirlet
Out of curiosity, to learn some, what did you monitor with tcpdump that leaded you to check the /tmp/session_token ?
|
I've simply hooked a precompiled arm binary taken (as far as I remember) from
here and used it to capture whole traffic on the loopback interface:
Code:
tcpdump -i lo -w /mnt/us/dump.pcap
Then I've done sync few times, created bunch of collections both on Amazon and Kindle and that's it
I'd rather not share my .pcap file, but you should be able to easy reproduce this situation and most of POST requests to 9101 port contains the AuthToken.
I was fortunate enough to find it in the /tmp folder (that was indeed a pure luck).
And as for
Quote:
Originally Posted by lrpirlet
Solution was to change CRLF to LF (notepad+ does that at a mouse click)...
|
Yeah, I also remember wasting some hours because of this stupid mechanism. Why for f***s sake a version control system would want to modify files it's supposed to provide.
Anyway I see most of the systems slowly migrate to universal \n endline, leaving typewriters \n\r legacy behind. Hopefully that'll happen still in my lifetime