Re:Removal of Mazda Connected Services Integration
by aneutron on Friday October 13, 2023 @05:50PM
(#37876003)
While if possible, it's the best course of action, the truth is these days additions like HSTS make it extremely difficult to MITM.
Additionally, MITM and trying things out on a toaster are one thing, doing the same on a 40k$ machine that can potentially make it impossible to do your commute is another.
This is IMO a prime example where the double team rev eng is key to success: one documents the API, the other uses it without having access to code (whiteroom)
Re:Removal of Mazda Connected Services Integration
by LoganDark on Tuesday October 17, 2023 @11:17PM
(#37924477)
HSTS interferes with MITM when the mobile device in question doesn't allow you to install new certificate authorities (as is slowly becoming the case).
Additionally, MITM and trying things out on a toaster are one thing, doing the same on a 40k$ machine that can potentially make it impossible to do your commute is another.
This is IMO a prime example where the double team rev eng is key to success: one documents the API, the other uses it without having access to code (whiteroom)