Re:After a week at my mom’s house I'm getting ads for her to...
by Wowfunhappy on Sunday May 30, 2021 @11:17AM
(#27333849)
> It should be extremely trivial to show that some data is traversing the network you fully control.
I obviously agree with you as the GGP, but the logical counterargument would be, these phones upload so much data in the normal case that it's hard to know what's what. And all of it is encrypted with https, often with certificate pinning.
But, well, audio files are really quite large, at least in the quantities we're discussing. And so in order for the data transfer to go unnoticed, the phone would have to be processing it locally, to decide what to upload. That would be a lot of work, in terms of cpu usage and battery life, and that, again, should have caught some researcher's attention.
Suffice to say, while I don't think any of this is feasible today, this is why locked-down devices and certificate pinning scare me. Audio is expensive, but you can learn a lot with a keylogger.
I obviously agree with you as the GGP, but the logical counterargument would be, these phones upload so much data in the normal case that it's hard to know what's what. And all of it is encrypted with https, often with certificate pinning.
But, well, audio files are really quite large, at least in the quantities we're discussing. And so in order for the data transfer to go unnoticed, the phone would have to be processing it locally, to decide what to upload. That would be a lot of work, in terms of cpu usage and battery life, and that, again, should have caught some researcher's attention.
Suffice to say, while I don't think any of this is feasible today, this is why locked-down devices and certificate pinning scare me. Audio is expensive, but you can learn a lot with a keylogger.