WhatPulse

by Melancholy

malmon
nya?
Torrents
Posts: 1,083
Threads: 18
Joined: Nov 2015
Reputation: 12
06-14-2016, 04:20 PM (This post was last modified: 06-14-2016, 04:21 PM by malmon.)
#42915 (51)
(06-14-2016, 03:58 PM)RX14 Wrote:
(06-14-2016, 03:06 PM)Hexd Wrote:
(04-29-2016, 09:42 PM)Equinox Wrote: nice keylogger m8 literally

I don't understand how you guys would install this on your computer.

Because it's not a keylogger? it logs statistics about your keys instead of the keys themselves lol.

To be fair, it could be a keylogger. It sends pulse data encrypted, so we can't really tell what's being sent. I guess one way to check if it's behaving like a keylogger would be to write an absolute fuckload, and see if the encrypted data length is significantly larger.

[Image: 68747470733a2f2f752e6e79612e69732f77757466626d2e6a7067]
Hexd
<#
zr
Posts: 170
Threads: 14
Joined: May 2016
Reputation: 2
06-14-2016, 04:23 PM
#42917 (52)
(06-14-2016, 03:58 PM)RX14 Wrote:
(06-14-2016, 03:06 PM)Hexd Wrote:
(04-29-2016, 09:42 PM)Equinox Wrote: nice keylogger m8 literally

I don't understand how you guys would install this on your computer.

Because it's not a keylogger? it logs statistics about your keys instead of the keys themselves lol.

I know, it's still pretty invasive though
Melancholy
すけべ
Admin
Posts: 3,863
Threads: 213
Joined: Jul 2014
Reputation: 60
06-14-2016, 04:57 PM
#42920 (53)
(06-14-2016, 04:20 PM)malmon73 Wrote:
(06-14-2016, 03:58 PM)RX14 Wrote:
(06-14-2016, 03:06 PM)Hexd Wrote:
(04-29-2016, 09:42 PM)Equinox Wrote: nice keylogger m8 literally

I don't understand how you guys would install this on your computer.

Because it's not a keylogger? it logs statistics about your keys instead of the keys themselves lol.

To be fair, it could be a keylogger. It sends pulse data encrypted, so we can't really tell what's being sent. I guess one way to check if it's behaving like a keylogger would be to write an absolute fuckload, and see if the encrypted data length is significantly larger.

if they were storing more than just keypresses and stuff, they'd need massive servers considering they have like over 20k people actively submitting data; some of these people with around 200m keypresses.

malmon
nya?
Torrents
Posts: 1,083
Threads: 18
Joined: Nov 2015
Reputation: 12
06-14-2016, 05:04 PM
#42921 (54)
(06-14-2016, 04:57 PM)Melancholy Wrote:
(06-14-2016, 04:20 PM)malmon73 Wrote:
(06-14-2016, 03:58 PM)RX14 Wrote:
(06-14-2016, 03:06 PM)Hexd Wrote: I don't understand how you guys would install this on your computer.

Because it's not a keylogger? it logs statistics about your keys instead of the keys themselves lol.

To be fair, it could be a keylogger. It sends pulse data encrypted, so we can't really tell what's being sent. I guess one way to check if it's behaving like a keylogger would be to write an absolute fuckload, and see if the encrypted data length is significantly larger.

if they were storing more than just keypresses and stuff, they'd need massive servers considering they have like over 20k people actively submitting data; some of these people with around 200m keypresses.

I guess they could probably filter it down to keypresses that *could* be usernames and passwords, e.g. "<something> TAB <something> ENTER"

[Image: 68747470733a2f2f752e6e79612e69732f77757466626d2e6a7067]
Backlash
Thread Necromancer
Nephilim
Posts: 986
Threads: 33
Joined: Oct 2015
Reputation: 15
06-14-2016, 05:26 PM (This post was last modified: 06-14-2016, 05:26 PM by Backlash.)
#42923 (55)
(06-14-2016, 04:57 PM)Melancholy Wrote:
(06-14-2016, 04:20 PM)malmon73 Wrote:
(06-14-2016, 03:58 PM)RX14 Wrote:
(06-14-2016, 03:06 PM)Hexd Wrote: I don't understand how you guys would install this on your computer.

Because it's not a keylogger? it logs statistics about your keys instead of the keys themselves lol.

To be fair, it could be a keylogger. It sends pulse data encrypted, so we can't really tell what's being sent. I guess one way to check if it's behaving like a keylogger would be to write an absolute fuckload, and see if the encrypted data length is significantly larger.

if they were storing more than just keypresses and stuff, they'd need massive servers considering they have like over 20k people actively submitting data; some of these people with around 200m keypresses.

Just ran a quick calculation: A standard US QWERTY keyboard usually has a maximum of 107 different keys; a keypress could be transmitted as a sequence of 7-bit binary numbers.

7 bits, times 200 million, gives us one-billion-and-four-hundred-million bits, which, with a little help from Google, translates into... .175 gigabytes. This, times its 20,000 active users, gives us 3,500 gigabytes; otherwise known as a measly 3.5 terabytes. Coincidentally, that's actually just a little bit more than the combined storage space of all my external hard disks.

So, yeah: Assuming an algorithm combed through the data at the end of the day and purged whatever wasn't deemed useful, I'd say it's completely possible for WhatPulse to be a keylogger.

(06-14-2016, 05:04 PM)malmon73 Wrote:
(06-14-2016, 04:57 PM)Melancholy Wrote:
(06-14-2016, 04:20 PM)malmon73 Wrote:
(06-14-2016, 03:58 PM)RX14 Wrote: Because it's not a keylogger? it logs statistics about your keys instead of the keys themselves lol.

To be fair, it could be a keylogger. It sends pulse data encrypted, so we can't really tell what's being sent. I guess one way to check if it's behaving like a keylogger would be to write an absolute fuckload, and see if the encrypted data length is significantly larger.

if they were storing more than just keypresses and stuff, they'd need massive servers considering they have like over 20k people actively submitting data; some of these people with around 200m keypresses.

I guess they could probably filter it down to keypresses that *could* be usernames and passwords, e.g. "<something> TAB <something> ENTER"

Malmon has the right idea in determining this, however: Simply run a script that simulates the rapid pressing of many keys, and compare it with a control.

If they've got time, someone should totally check this out!

Melancholy
すけべ
Admin
Posts: 3,863
Threads: 213
Joined: Jul 2014
Reputation: 60
06-14-2016, 05:45 PM
#42927 (56)
whatpulse is like, 10 years old or something; surely they've been accused of being a keylogger before and have been audited.

Hexd
<#
zr
Posts: 170
Threads: 14
Joined: May 2016
Reputation: 2
06-14-2016, 07:58 PM (This post was last modified: 06-14-2016, 08:00 PM by Hexd.)
#42938 (57)
[Image: 68747470733a2f2f752e706f6d662e69732f6a63...7a2e676966]
>surely they've been accused of being a keylogger before and have been audited.
its not open source so i doubt it, besides any audit would be internal. The facts that it's not open source, it hasnt been independently audited make me stay clear. Even then why would i want to take this risk just so i know how many keys i click? this information doesnt seem useful in any productive way unlike other invasive services like google maps which at least provide me a service that's useful.

I cant seem to find any information about how they transmit whats collected. All i find is about their website and the fact they can access you account if they need to.

Quote:Your WhatPulse account is protected by a password for your privacy and security. This password is stored encrypted. Protect against unauthorized access to your account by logging off the website once you have finished using a shared computer.

Only WhatPulse staff who need personal information to perform a specific task (upon your request) are granted access to it. All of our employees are kept up to date on our privacy and security policies.

anyways I'm done with messing up your fun. If you guys don't mind giving this information up then that's up to you. I just thought i'd bring up my concern with something like this in case you weren't aware of the possibilities. I'll go back to my animu
[Image: 68747470733a2f2f752e706f6d662e69732f7676...6c2e676966]
malmon
nya?
Torrents
Posts: 1,083
Threads: 18
Joined: Nov 2015
Reputation: 12
06-14-2016, 08:11 PM
#42940 (58)
(06-14-2016, 07:58 PM)Hexd Wrote: All i find is about their website and the fact they can access you account if they need to.

Well, it says that they'll only do that upon the user's request.

[Image: 68747470733a2f2f752e6e79612e69732f77757466626d2e6a7067]
RX14
Chibi Hentai Master
Optimist
Posts: 500
Threads: 5
Joined: Nov 2015
Reputation: 1
06-15-2016, 01:20 PM (This post was last modified: 06-15-2016, 01:20 PM by RX14.)
#42971 (59)
To be honest, any other piece of software on your computer could be a keylogger too. If you care so much don't run anything not open source!

AFAIK, at least on windows, whatpulse doesn't get special permissions.

[Image: 68747470733a2f2f6177772e6d6f652f683731666e372e706e67]
English animemester
malmon
nya?
Torrents
Posts: 1,083
Threads: 18
Joined: Nov 2015
Reputation: 12
06-15-2016, 01:25 PM
#42972 (60)
(06-15-2016, 01:20 PM)RX14 Wrote: AFAIK, at least on windows, whatpulse doesn't get special permissions.

mfw UAC is disabled :s

[Image: 68747470733a2f2f752e6e79612e69732f77757466626d2e6a7067]