News for hackers. Stuff that matters.

A comment on Facebook Really Is Spying on You, Just Not Through Your Phone's Mic. Parent comment

Re:Facebook Really Is Spying on You, Just Not Through Your P... by imhoguy on Wednesday March 07, 2018 @03:36PM (#16539627)
Wouldn't it be possible to crack an app (decompile etc) to disable Certificate Pinning? What comes to my mind also is a debug to obtain TLS master-secret then one can decrypt encrypted stream post-factum (Wireshark accepts master-secrets).
[ Parent | on HN ]
Re:Facebook Really Is Spying on You, Just Not Through Your P... by omni on Wednesday March 07, 2018 @03:38PM (#16539649)
Yes, and there are tools to do exactly that. https://github.com/sensepost/objection
[ Parent | on HN ]