News for hackers. Stuff that matters.

A comment on The Secret API of Banks. Parent comment

Re:The Secret API of Banks by btmerr on Wednesday August 08, 2018 @10:16PM (#17721252)
Cert pinning. EOL.
[ Parent | on HN ]
Re:The Secret API of Banks by KirinDave on Wednesday August 08, 2018 @10:39PM (#17721328)
If it's in the binary Simple ships I can take it or modify it to not need it. It's a huge pain in the ass, but it's not "hard."

And while I know I did a cert pin and you did a cert pin, not everyone does it (or does it bidirectionally). Nor is that the only way folks would get an API spec.

[ Parent | on HN ]
Re:The Secret API of Banks by juancampa on Wednesday August 08, 2018 @11:29PM (#17721473)
There are ways to work around cert pinning
[ Parent | on HN ]
Re:The Secret API of Banks by nnd on Thursday August 09, 2018 @12:08PM (#17725427)
Can be easily bypassed.
[ Parent | on HN ]