Re:Why We Must Fight for the Right to Repair Our Electronics
by userbinator on Wednesday October 25, 2017 @06:40AM
(#15548959)
As root you could probably detect this but you'd really have to know what you were looking for.
I can think of two relatively easy and probably-not-secure (you were asking for freedom, not security...) ways to not only detect but also bypass this:
- Hook certificate verification APIs to always return true.
- Scan for certificates embedded in the binary and overwrite them dynamically. This will work if the app decides to use its own crypto but standard certificate formats.
I can think of two relatively easy and probably-not-secure (you were asking for freedom, not security...) ways to not only detect but also bypass this:
- Hook certificate verification APIs to always return true.
- Scan for certificates embedded in the binary and overwrite them dynamically. This will work if the app decides to use its own crypto but standard certificate formats.