How did Facebook intercept their competitor's encrypted mobile app traffic?

Re:How did Facebook intercept their competitor's encrypted m... by theptip on Sunday July 28, 2024 @01:01PM (#41094396)

The claim in the OP is that they might have been MiTM’ing arbitrary users, I believe the previously reported claims were that they only MiTM’d paid research participants. (Please share some links if you have evidence to the contrary, I’d love to get to the bottom of this.)

[ Parent | on HN ]

Re:How did Facebook intercept their competitor's encrypted m... by oefrha on Sunday July 28, 2024 @01:03PM (#41094409)

Onavo isn’t paid, it’s just a “free” VPN app. There’s no paid participation, you just download it.

https://www.bitdefender.com/blog/hotforsecurity/facebook-pul...

https://www.wsj.com/articles/facebook-to-remove-data-securit...

Edit: Typo.

[ Parent | on HN ]

Re:How did Facebook intercept their competitor's encrypted m... by valicord on Sunday July 28, 2024 @01:41PM (#41094658)

That doesn't mean that the MITM traffic interception would be enabled for regular users that have downloaded the app from the store. As stated both in the article and in the comments here, both "free" VPN and "paid market research" VPN used the same codebase. Is there any evidence (other than "facebook bad") that the MITM part was enabled for anyone other than consenting/getting paid participants?

[ Parent | on HN ]