Why We Must Fight for the Right to Repair Our Electronics

Re:Why We Must Fight for the Right to Repair Our Electronics by chrisper on Wednesday October 25, 2017 @01:24AM (#15547717)

If you have root, can you not install SSL certificates?

[ Parent | on HN ]

Re:Why We Must Fight for the Right to Repair Our Electronics by dasil003 on Wednesday October 25, 2017 @02:48AM (#15548032)

I am totally ignorant of Android, but they could be pinning, and do so in such a way that it fails silently without sending data. As root you could probably detect this but you'd really have to know what you were looking for.

[ Parent | on HN ]

Re:Why We Must Fight for the Right to Repair Our Electronics by userbinator on Wednesday October 25, 2017 @06:40AM (#15548959)

As root you could probably detect this but you'd really have to know what you were looking for.

I can think of two relatively easy and probably-not-secure (you were asking for freedom, not security...) ways to not only detect but also bypass this:

- Hook certificate verification APIs to always return true.

- Scan for certificates embedded in the binary and overwrite them dynamically. This will work if the app decides to use its own crypto but standard certificate formats.

[ Parent | on HN ]

Re:Why We Must Fight for the Right to Repair Our Electronics by zeveb on Wednesday October 25, 2017 @10:57AM (#15550641)

And if you have root, then your device fails to attest. Who owns your device: Google or you?

This is about control.

[ Parent | on HN ]

Re:Why We Must Fight for the Right to Repair Our Electronics by amckinlay on Wednesday October 25, 2017 @04:06PM (#15553646)

You don't have root, that was a typo, sorry. I cannot go back and edit the post.

[ Parent | on HN ]