News for hackers. Stuff that matters.

A comment on Windows 11: a spyware machine out of users' control. Parent comment

Re:Windows 11: a spyware machine out of users' control by DethNinja on Wednesday February 08, 2023 @02:37PM (#34713643)
Wouldn’t transparent TLS with self signed certificates solve this problem? I’ll definitely try this in couple of weeks but I can’t be the only person to try this to uncover exact data that is being sent via Windows telemetrics.

Another alternative would be remote debugging the kernel and hooking into some of the undocumented API calls but that would take lots of effort.

[ Parent | on HN ]
Re:Windows 11: a spyware machine out of users' control by horsawlarway on Wednesday February 08, 2023 @03:20PM (#34714366)
Just spin up Fiddler with a generated root CA on the device. Or if you don't trust the network stack on the OS - point the thing at a MITM proxy and trust the self-signed CA in the certificate store.

It's really not all that hard to view https traffic...

ex: https://www.telerik.com/fiddler/fiddler-classic

[ Parent | on HN ]
Re:Windows 11: a spyware machine out of users' control by ormax3 on Wednesday February 08, 2023 @03:55PM (#34714963)
something like this using mitmproxy (from 2017):

https://www.softscheck.com/en/blog/windows-10-enterprise-tel...

[ Parent | on HN ]