News for hackers. Stuff that matters.

A comment on Facebook has been paying people to install a “Research” VPN. Parent comment

Re:Facebook has been paying people to install a “Research” VPN by dzhiurgis on Tuesday January 29, 2019 @11:10PM (#19032572)
So what DOES pinning protect against? Certs generated by state actors with access to CA’s?
[ Parent | on HN ]
Re:Facebook has been paying people to install a “Research” VPN by frankchn on Tuesday January 29, 2019 @11:12PM (#19032585)
That, and (more commonly) CAs mis-issuing certificates to malicious actors due to bugs or weak internal controls.
[ Parent | on HN ]
Re:Facebook has been paying people to install a “Research” VPN by jevinskie on Wednesday January 30, 2019 @12:46AM (#19032987)
You can enforce certificate pinning in your own native app. You can even go as far as not trusting the hookable (on a JBen device) system libraries and link in your own OpenSSL or something similar.
[ Parent | on HN ]