News for hackers. Stuff that matters.

A comment on Ask HN: Is anyone monitoring popular apps to check if they're listening?. Parent comment

Re:Ask HN: Is anyone monitoring popular apps to check if the... by PragmaticPulp on Sunday September 19, 2021 @11:52AM (#28585311)
> Insstead, a small compressed bit of text on keywords could be sent whether that's immediately or saved up until user foregrounds the app.

Which would then appear in the packet captures that can be performed on the traffic (after circumventing certificate pinning).

My premise wasn’t that each step was impossible. It was that many steps would have to take place without being detected anywhere along the chain.

[ Parent | on HN ]
Re:Ask HN: Is anyone monitoring popular apps to check if the... by dylan604 on Sunday September 19, 2021 @11:57AM (#28585350)
How do you distinguish the, assumed, encrypted transmission from a foreground app sending this data compared to just requesting an update for the app's viewport?
[ Parent | on HN ]
Re:Ask HN: Is anyone monitoring popular apps to check if the... by hutzlibu on Monday September 20, 2021 @04:00AM (#28591310)
With a fully reversed engeneered app, this would be possible. But I believe the effort for this is quite high. And with obfuscation even higher.
[ Parent | on HN ]