News for hackers. Stuff that matters.

A comment on Avoid Non-Microsoft Antivirus Software. Parent comment

Re:Avoid Non-Microsoft Antivirus Software by rocqua on Thursday January 26, 2017 @08:30AM (#13491102)
How does that work with chromes certificate pinning for google? Do they do some runtime modification (e.g. DLL-injection) to disable the check?
[ Parent | on HN ]
Re:Avoid Non-Microsoft Antivirus Software by ThisIs_MyName on Thursday January 26, 2017 @09:29AM (#13491581)
Cert pinning ignores root certs. This is by design :(

>The Chromium browser disables pinning for certificate chains with private root certificates to enable various corporate content inspection scanners and web debugging tools (such as mitmproxy or Fiddler). The RFC 7469 standard recommends disabling pinning violation reports for "user-defined" root certificates, where it is "acceptable" for the browser to disable pin validation.

[ Parent | on HN ]
Re:Avoid Non-Microsoft Antivirus Software by voltagex_ on Thursday January 26, 2017 @09:38AM (#13491671)
The alternative would be no Chrome and/or Firefox at my workplace, and many others.
[ Parent | on HN ]
Re:Avoid Non-Microsoft Antivirus Software by chopin on Thursday January 26, 2017 @09:32AM (#13491617)
It does not work with certificates installed by the user.
[ Parent | on HN ]