News for hackers. Stuff that matters.
Re:Tracking my phone's silent connections by Shaaaaaaare on Sunday February 24, 2019 @07:33AM (#19238338)
Unfortunately Google both supports and recommends this. Recently they've even made it easy for apps to automatically ignore any custom certificates added to the trust store, so they don't even have to bother to implement pinning.
Re:Tracking my phone's silent connections by xg15 on Sunday February 24, 2019 @07:47AM (#19238367)
Yeah, I'm honestly not surprised. Apologies for the cynicism, but sometimes I wonder if the pushes for HTTPS-everywhere, certificate transparency and DoH are really more for the privacy of app developers instead of the privacy of users...
Re:Tracking my phone's silent connections by holri on Sunday February 24, 2019 @07:54AM (#19238392)
If you care about the privacy of users, you need software that the user controls, not the developer. Therefore free software.
Re:Tracking my phone's silent connections by hedvig on Sunday February 24, 2019 @07:51AM (#19238378)
Supply-side economics is and always will be dominant.
Re:Tracking my phone's silent connections by r1ch on Sunday February 24, 2019 @08:37AM (#19238493)
Understandable position for them to take when you have the likes of Facebook / Onavo etc pushing VPNs and root certificates on uninformed users for "research".