RE: Point-of-Sale Activation 04-25-2018, 10:00 PM
#110
(04-23-2018, 04:14 PM)DigitalConcepts Wrote: due to the getyourcode place hat only asks for the DiSa number is making me think there isn't any math to it and perhaps all they use a random number generator to assign a code and attach it to that disa number and all the merchant does is grab that code from their personal storage (merchant is given all the disa and activation codes on delivery) not having to go online to the disa server to decode anything, would make more sense and also stop any disa generators from being built to defeat them , we have a "sort of" workaround but requires a bit of more time and these projectors are not worth the time, the quality is not all that good but for the convenience of having a portable projector suites its purpose
It is unlikely that these DiSa numbers are anything but what DigitalConcepts described. Random unique identifiers used by the merchant to provide the proper activation code, and they are also stored by the manufacturer to provide the activation code via website or telephone. The activation code is mathematically computed, being that it uses an encryption algorithm. Having worked in a Data Encryption environment for 2 years, I can vouch that we used several randomly generated numbers we called "unique identifiers" as a label for private keys. In this, the individual requesting the key because they forgot it or lost it provided us the random unique identifier and we could provide them the proper key. We didn't store or have access to any hashes that I know of. This situation is a bit unique, but not unexpected. Blowfish encryption algorithm was specifically designed for embedded systems, because embedded system are performance constrained and blowfish encryption requires few system resources to implement and use. All of these tablets probably use it, and because it requires as little as 5KB to implement, it is likely the "TestDiSa" file has either been hidden or is being protected by the system to prevent unauthorized access. After all, this is like leaving a safe with someone who wants to crack it, and giving them all the time in the world to do it. It makes sense from a security standpoint to remove this open vulnerability.
To the individual who has a tablet that doesn't show the TestDisa file when plugged into a computer. If you type an activation code in, does the tablet stop at 6 digits or does it let you enter more than 6?
(This post was last modified: 04-25-2018, 10:02 PM by InfectedMachine.)

![[+]](https://sinister.li/images/modern/collapse_collapsed.png)