News for hackers. Stuff that matters.

A comment on Facebook Really Is Spying on You, Just Not Through Your Phone's Mic. Parent comment

Re:Facebook Really Is Spying on You, Just Not Through Your P... by dancek on Wednesday March 07, 2018 @03:35PM (#16539618)
Couldn't someone just patch the binary to accept a different certificate? Or for that matter, read the decompiled bytecode and figure out if the app is listening? Or run a patched Android that logs all microphone API calls?

I suspect I'm overlooking something, as surely some security researcher would have done some of this already.

[ Parent | on HN ]
Re:Facebook Really Is Spying on You, Just Not Through Your P... by sofaofthedamned on Wednesday March 07, 2018 @03:41PM (#16539681)
Yup, patching the binary works fine.
[ Parent | on HN ]
Re:Facebook Really Is Spying on You, Just Not Through Your P... by janoc on Wednesday March 07, 2018 @04:06PM (#16539891)
Unless that package/binary is signed - which Android ones are.
[ Parent | on HN ]
Re:Facebook Really Is Spying on You, Just Not Through Your P... by userbinator on Wednesday March 07, 2018 @08:42PM (#16541607)
Then patch the signing...

...and if the signing code is also signed, then patch that.

It's patches all the way down. ;-)

[ Parent | on HN ]