News for hackers. Stuff that matters.

A comment on Facebook snooped on users' Snapchat traffic in secret project, documents reveal. Parent comment

Re:Facebook snooped on users' Snapchat traffic in secret pro... by chedabob on Wednesday March 27, 2024 @06:31AM (#39837398)
Cert Pinning and Certificate Transparency should block the decryption, even on a VPN where the user has installed a custom root certificate.

It wouldn't stop them seeing what domains the user is going to (as it's sent in plaintext because of SNI, and ECH was still a few years away).

[ Parent | on HN ]
Re:Facebook snooped on users' Snapchat traffic in secret pro... by immibis on Wednesday March 27, 2024 @07:09AM (#39837603)
The same techniques make it more difficult for a user/developer to figure out what their device is doing.
[ Parent | on HN ]