So Katy got a scam text claiming to be Canada Post with an underliverable package. I'm in the process of gathering information to send a report to their registrar's abuse department, but they're doing something clever to cover their tracks that I haven't fully been able to unravel.
For context, here is the link (with spaces added to prevent it from turning into an actual link and being accidentally clicked):
https:// canadapost-postecanadadeliverylivraison .com/canadapost/index.php
When opened from Safari on her phone, it loads a realistic looking phishing site, but when opened from any other browser, it returns an empty (0 bytes) page. I assume this is to hamper attempts to investigate abuse claims (though the domain name is already pretty incriminating).
Since there doesn't appear to be any kind of unique identifier, I assumed this to be some kind of spear phishing attack that was based on her browser's User-Agent string, but when I tell curl to mimic it, I still don't get a result.
Any ideas about how they're doing this?
Isaac Ji Kuo
in reply to Jonathan Lamothe • • •Sensitive content
A trit.
What's really a trip is balanced ternary. It's so elegant it almost hurts.
Instead of trit values being 0, 1, and 2, the trit values are -1, 0, and 1. Each range of numbers is naturally balanced around 0, and multiplying a number by -1 is simply multiplying each digit by -1.
Jonathan Lamothe
in reply to Isaac Ji Kuo • •Jonathan Lamothe
in reply to Jonathan Lamothe • •Isaac Ji Kuo
in reply to Jonathan Lamothe • • •Sensitive content
It works the same as in decimal, except there's no need for a sign on either the mantissa or the exponent.
Base 2 floating point is a bit different because it can skip the initial 1 on the mantissa (it's always a 1, except for the edge case of zero; there needs to be exceptions for dealing with zero).
Jonathan Lamothe
in reply to Isaac Ji Kuo • •Digital Mark Ξ» βοΈ πΉ π½
in reply to Jonathan Lamothe • • •Sensitive content
A tit! Er, trit.
So instead of counting 1, 2, 4, 8, 16, like a normal person, it's 1, 3, 9, 27, 81.
I'm too binary-conditioned to use that even as a jokey thing. Making a VM to try it out would be hard.