Luca Casonato ๐Ÿณ๏ธโ€๐ŸŒˆ @lcas.dev ยท Dec 28

On startup, the Italo app also fetches a various XML encoded bits of content from it's CDN that it uses to display ads and such on the index page. This XML is UTF-8 encoded, and then sent as a JSON array of integers in the range 0-255. This increases transfer size by slightly over 3.5x!

30 likes 3 replies

?

Replies

Lynn ยท Dec 28

What

Kayla ใฏใช ยท Dec 28

thanks got the new nightmares this will bring me

Luca Casonato ๐Ÿณ๏ธโ€๐ŸŒˆ ยท Dec 28

Trenitalia also really doesn't want anyone to reverse engineer their app to get public information, so they certificate pin lol - do they really think that is going to stop me? I think they are just embarrased by the quality of their API endpoints lol And Italo clearly has never had a pen test done