Get the latest tech news

Gaining access to anyones Arc browser without them even visiting a website

gaining access to anyones browser without them even visiting a website

from previous experience hacking an IOS based app, i immediately had a hunch on what this was, firestore. firestore has a tendency to not abide by the system proxy settings in the Swift SDK for firebase, so going off my hunch, i wrote a frida script to dump the relevant calls. so it looks like arc stores some preferences in firestore, along with a basic user object, referrals and boosts

Get the Android app