News for hackers. Stuff that matters.

A comment on Facebook Really Is Spying on You, Just Not Through Your Phone's Mic. Parent comment

Re:Facebook Really Is Spying on You, Just Not Through Your P... by doh on Wednesday March 07, 2018 @03:39PM (#16539659)
While certificate pinning is annoying, it's just an obstacle not a roadblock. I haven't met a security research that mentioned this to be a prohibitive feature.

There are couple ways out, from revers engineering the binaries, through jailbroken/rooted phones, running apps in simulators, etc.

[ Parent | on HN ]
Re:Facebook Really Is Spying on You, Just Not Through Your P... by tomc1985 on Wednesday March 07, 2018 @05:29PM (#16540566)
You can't beat certificate pinning with offline analysis?
[ Parent | on HN ]
Re:Facebook Really Is Spying on You, Just Not Through Your P... by doh on Wednesday March 07, 2018 @06:53PM (#16541086)
You can, if you want to read reverse engineered code. Takes more time, but completely doable. I do that on all Android apps.
[ Parent | on HN ]