News for hackers. Stuff that matters.
Re:Tracking Electric Scooters in Lisbon by thepete2 on Friday December 13, 2019 @11:56PM (#21787910)
I understand that. My question is since this is https - encrypted http - how do you decrypt the traffic? Is there something running on the phone too? Otherwise you would need the server's private key, right?
Re:Tracking Electric Scooters in Lisbon by nicksantamaria on Saturday December 14, 2019 @02:26AM (#21788299)
I haven't done this myself, but I assume you would install the certificate mitmproxy uses on your phone. That would result in a successful handshake
Re:Tracking Electric Scooters in Lisbon by sknzl on Saturday December 14, 2019 @04:24AM (#21788611)
That's correct. Mitmproxy offers an easy way to install a root certificate: https://docs.mitmproxy.org/stable/concepts-certificates/
Re:Tracking Electric Scooters in Lisbon by thepete2 on Saturday December 14, 2019 @08:52AM (#21789484)
ah thanks! I'm definitely going to use that.