NumBuster-API icon indicating copy to clipboard operation
NumBuster-API copied to clipboard

Contacts md5 hash

Open alexgh-dev opened this issue 5 years ago • 3 comments

Thank you for application. How are contact names hashed? This is md5, but not just from the name. What does the hash come from? Readed - https://github.com/DoctorEenot/NumBuster-API/issues/6, but Md5 hashes match for the same names for different phone numbers.

alexgh-dev avatar Sep 10 '20 04:09 alexgh-dev

Hi, I am not sure what exactly is used to create hash. I guess hashes match because, different people with the same name have different numbers, so hashes are probably created from just names.

YeahNotSewerSide avatar Sep 10 '20 05:09 YeahNotSewerSide

Hi, I am not sure what exactly is used to create hash. I guess hashes match because, different people with the same name have different numbers, so hashes are probably created from just names.

On different accounts, the hashes for the same numbers are the same. So the hash depends only on the contact name and possibly some salt. Need to know the salt))

alexgh-dev avatar Sep 10 '20 06:09 alexgh-dev

I am still working on it, but if names are hashed on the server side, and numbuster's application doesn't have the same code for hashing, it will be really challenging to reverse that salt.

YeahNotSewerSide avatar Sep 10 '20 06:09 YeahNotSewerSide