{"id":485,"date":"2011-04-16T23:29:54","date_gmt":"2011-04-17T04:29:54","guid":{"rendered":"http:\/\/rud.is\/b\/?p=485"},"modified":"2018-03-10T07:53:17","modified_gmt":"2018-03-10T12:53:17","slug":"dbclone-hack-for-os-x","status":"publish","type":"post","link":"https:\/\/rud.is\/b\/2011\/04\/16\/dbclone-hack-for-os-x\/","title":{"rendered":"dbClone “hack” for OS X"},"content":{"rendered":"

UPDATE:<\/b> Check out the newer post<\/a> on additional features.<\/p>\n

\"\"There has been much ado of late about Dropbox security<\/a> with one of the most egregious issues being how easy it is to surreptitiously “clone” someone else’s Dropbox by obtaining just one piece of data – the host id – from the Dropbox SQLite config.db<\/code>.<\/p>\n

Moloch built<\/a> a Windows & Linux impersonation\/cloning utility in Python that was\/is meant to be used from a USB\/external volume. The utility can save the cloned host id to a local file and also has the capability to use a simple HTTP GET<\/code> request to log data to a “mothership” web site.<\/p>\n

Since many Dropbox users use OS X (including me) I didn’t want them to feel left out or smugly more secure. So, I set about creating a native version of the utility.<\/p>\n

This release is not as feature-rich as Moloch’s Python script but it won’t take much more effort to crank out a version that duplicates all of the functionality. “Release early. Release often.” as the kids these days are wont to say.<\/p>\n

You can find the source at its github repository<\/a>. When building it or just downloading & running the executable (see below), you should heed the repo’s README and take care to change the following items in the application’s Info.plist<\/code> property list:<\/p>\n