News for hackers. Stuff that matters.

A comment on Facebook has been paying people to install a “Research” VPN. Parent comment

Re:Facebook has been paying people to install a “Research” VPN by merlincorey on Tuesday January 29, 2019 @07:20PM (#19031345)
It is "root" in the sense of "root certificate"[0] which allows, potentially, the ability to MITM essentially any TLS connection transparently to the user.

[0] https://en.wikipedia.org/wiki/Root_certificate

[ Parent | on HN ]
Re:Facebook has been paying people to install a “Research” VPN by threeseed on Tuesday January 29, 2019 @07:32PM (#19031413)
"root access" has a different meaning than "root certificate"
[ Parent | on HN ]
Re:Facebook has been paying people to install a “Research” VPN by merlincorey on Tuesday January 29, 2019 @08:37PM (#19031784)
Yes, I'm aware of that, which is why I "translated" for the article.
[ Parent | on HN ]
Re:Facebook has been paying people to install a “Research” VPN by saagarjha on Tuesday January 29, 2019 @07:22PM (#19031363)
Any non-pinned connection, since some apps employ certificate pinning on iOS and can't be intercepted without modifying their application binary. This is uncommon, though.
[ Parent | on HN ]
Re:Facebook has been paying people to install a “Research” VPN by minimaxir on Tuesday January 29, 2019 @07:30PM (#19031403)
A notable app that uses certificate pinning is Facebook.
[ Parent | on HN ]
Re:Facebook has been paying people to install a “Research” VPN by Skunkleton on Tuesday January 29, 2019 @07:46PM (#19031491)
Phew, I was worried that facebook would scrape my confidential communication with facebook.
[ Parent | on HN ]
Re:Facebook has been paying people to install a “Research” VPN by 11sdmb8m on Tuesday January 29, 2019 @07:49PM (#19031516)
We all know what "root access" means, and this is not it.
[ Parent | on HN ]