Recent content on Eric Daigle

 Neither of us had prior experience developing mobile apps, but we thought, “Hey, we’re both smart. This shouldn’t be too difficult.” 
 
 
 Freedom Chat CEO Tanner Haas 
 
 Background 
 Once upon a time, in the distant memory that is 2023, a new instant messaging app called Converso was launched. Converso made some pretty impressive claims about its security: it…
Background 
 Recently I was looking through a database of known stalkerware services and found one I wasn’t familiar with: Catwatchful . It seemed to be a full-featured Android spy app, to actually be its own service as opposed to a millionth FlexiSpy reseller, and to offer a 3-day free trial. Aside from a boilerplate disclaimer to only use it with consent, it also pretty brazenly…
Journalism 
 
 404 Media 
 Canada’s National Observer 
 Netzpolitik.org 
 London Review of Books 
 Literary Review of Canada 
 e-flux journal 
 Revue Esprit 
 
 Blogs 
 
 The Convivial Society 
 maia arson crimew 
 Sam Curry 
 DYNOMIGHT INTERNET WEBSITE 
 ava’s blog 
 
 Groups 
 
 UBC VOC 
 Maple Bacon…
Background 
 A few months ago I was on my way to catch the SeaBus when I walked by an apartment building with an interesting looking access control panel. I wrote down the “MESH by Viscount” brand name and made a note to look into it when I had a chance. I ended up just missing my ferry (the 30 minute Sunday headways are brutal), so I decided to see if I could find anything promising on my…
Background 
 Today we take a break from exploring stalkerware/watchware to examine a vulnerability in iChano AtHome Camera , a pair of applications allowing smartphones and computers to be used as IoT-enabled security cameras. This exploit allows an attacker snooping on the network while an AtHome Camera user logs into the Viewer app to intercept the credentials of all cameras to which the…
Background 
 PCTattletale is a simple stalkerware app. Instead of providing the sophisticated monitoring of many similarly insecure competitors it simply asks for permission to record the targeted device (Android and Windows are supported) on infection. Afterward the observer can log in to an online portal and activate recording, at which point a screen capture is taken on the device and…
Backgruond 
 I recently discovered a serious security lapse in iSharing, a location tracker/parental control app for iOS and Android that claims over 35 million users. Upon discovering the issue and getting no response from the developers I contacted Zack Whittaker at TechCrunch, who was super helpful first in confirming the vulnerability and then in establishing contact with the devs. Zack…
Problem Description 
 
 This challenge is simple. It just gets input, stores it to a buffer. It calls gets to read input, stores the read bytes to a buffer, then exits. What is gets, you ask? Well, it’s time you read the manual, no? Author: drec 
 
 This is a simple beginner pwn challenge. 
 Getting started 
 We connect with netcat and see the program silently accepts a…
Recently a project at work required me to write an automated and reusable script to add country data to NSDIC’s Free Air Gravity Anomaly dataset . The classic open-source solution would have been PyQGIS’s processing module, but QGIS strangely still doesn’t support editing CSV layers out of the box, which would make for annoying intermediate steps converting to and from GeoJSON. 
 Fortunately…
About me 
 
 🇨🇦, originally from Ottawa, now based in Vancouver 
 Fluent in French and English, conversational in German, minimal (working on it!) Mandarin 
 Graduating from UBC with a degree in computer science and economics 
 I like GIS, spatial data science, cartography, and statistics, particularly applications thereof relating to addressing climate change and other…