Appreciate the effort, but you might want to refine your reversing methodology a bit more.
Identifying an AES-CBC structure (IV + aligned ciphertext) is fairly basic and doesn’t imply malicious intent by itself. This pattern is widely used in legitimate applications, especially for secure config delivery.
A stronger analysis would focus on what happens after decryption — whether there is actual command execution, dynamic loading, or control flow tied to a remote actor.
Right now, the conclusion feels a bit ahead of the evidence.
@blank_angles@gnukeith Thank you for bringing this to our attention. The issue stems from missing English i18n strings, and a fix is in progress. Please note that the Chinese version remains unaffected
We've launched in the Hong Kong Apple App Store, but for Android, you can just install it directly using the APK. We are very honored to be compared with a top-level VPN provider like ExpressVPN.
@stupidtechtakes We've launched in the Hong Kong Apple App Store, but for Android, you can just install it directly using the APK. We are very honored to be compared with a top-level VPN provider like ExpressVPN.
@stupidtechtakes@harryt10@gnukeith this proves that we can access the global internet even in the most authoritarian countries and regions with the strictest network censorship.
@Thereallo1026 Since you're a developer, you might assume everyone has GitHub, but that's not the case. In China, many people have never even used GitHub and only know about Gitee.